5.3 CVE-2021-43177

 

As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password (OTP) for one (and only one) immediately trailing interval. CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
https://nvd.nist.gov/vuln/detail/CVE-2021-43177

Categories

CWE-NVD-noinfo

CWE-254

References


 

CPE

cpe start end
Configuration 1
cpe:2.3:a:tinfoilsecurity:devise-two-factor:*:*:*:*:*:*:*:* < 4.0.2


REMEDIATION




EXPLOITS


Exploit-db.com

id description date
No known exploits

POC Github

Url
No known exploits

Other Nist (github, ...)

Url
No known exploits


CAPEC


Common Attack Pattern Enumerations and Classifications

id description severity
No entry