BIT-joomla-2021-23126

vendorUSosv

[20210301] - Core - Insecure randomness within 2FA secret generation

view advisory published 2025-04-03Licence: per source

An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand() function within the process of generating the 2FA secret.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-23126US	medium5.3	1.11% (66th)	—	2021-03-04
An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand() function within the process of generating the 2FA secret.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.