CVE-2026-108071 : 상세 정보

CVE-2026-108071

2026-10-14
11h17 +00:00
A07-Identif. and Authent. Fail
2026-10-15
16h33 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote attacker authenticated with valid first-factor credentials could bypass the second-factor verification because the authentication flow does not correctly apply the MFA validation result, allowing the attacker to complete the login without a valid second-factor token and gain access to protected applications and resources.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-304 Missing Critical Step in Authentication
The product implements an authentication technique, but it skips a step that weakens the technique.

참고 자료