Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Controlpanel Lite. "After login we are directly able to use the bearer token or jsession ID to access the apis instead of entering the 2FA code. Thus, leading to bypass of 2FA on API level.
References
| Link | Resource |
|---|---|
| https://www.shopbeat.co.za | Product |
| https://www.shopbeat.co.za | Product |
Configurations
History
21 Nov 2024, 07:12
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.shopbeat.co.za - Product |
02 Jun 2023, 20:50
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:shopbeat:shop_beat_media_player:*:*:*:*:*:*:arm:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| References | (MISC) https://www.shopbeat.co.za - Product | |
| CWE | CWE-306 |
30 May 2023, 21:10
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-30 20:15
Updated : 2025-01-13 21:15
NVD link : CVE-2022-36249
Mitre link : CVE-2022-36249
CVE.ORG link : CVE-2022-36249
JSON object : View
Products Affected
shopbeat
- shop_beat_media_player