{"id":"CVE-2019-18985","published":"2019-11-15T04:21:57Z","modified":"2024-08-05T02:02:39Z","title":"Pimcore before 6.2.2 lacks brute force protection for the 2FA token","vendor":null,"product":null,"tier":"tail","description":{"text":"Pimcore before 6.2.2 lacks brute force protection for the 2FA token.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01441,"percentile":0.732,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/pimcore/pimcore/compare/v6.2.1...v6.2.2","tags":["x_refsource_MISC"]},{"url":"https://github.com/pimcore/pimcore/commit/9f2d075243a8392c114d9a8028858b9faf041e2d","tags":["x_refsource_MISC"]}],"priority":{"score":14.6,"factors":[{"name":"EPSS percentile","points":14.64}]},"affected":[{"ecosystem":"Packagist","package":"pimcore/pimcore","vulnerableRanges":["<6.2.2"],"patched":["6.2.2"],"from":["GHSA-hf62-5vxh-jpwj"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-4131","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2019-16317","published":"2019-09-14","fixed":"5.7.1","kev":false},{"cve":"CVE-2019-16318","published":"2019-09-14","fixed":"5.7.1","kev":false},{"cve":"CVE-2019-18981","published":"2019-11-15","fixed":"6.2.2","kev":false},{"cve":"CVE-2019-18985","published":"2019-11-15","fixed":"6.2.2","kev":false},{"cve":"CVE-2019-18986","published":"2019-11-15","fixed":"6.2.2","kev":false},{"cve":"CVE-2019-10763","published":"2019-11-18","fixed":"6.3.0","kev":false,"link":{"from":"CVE-2019-18985","to":"CVE-2019-10763","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:pimcore/pimcore","fromFixed":"6.2.2","toFixed":"6.3.0","daysApart":3}]}},{"cve":"CVE-2019-18656","published":"2019-10-31","fixed":"6.3.0","kev":false},{"cve":"CVE-2019-18982","published":"2019-11-15","fixed":"6.3.0","kev":false,"link":{"from":"CVE-2019-18985","to":"CVE-2019-18982","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:pimcore/pimcore","fromFixed":"6.2.2","toFixed":"6.3.0","daysApart":0}]}}],"package":"Packagist:pimcore/pimcore"}}