CVE-2021-23126 — [20210301] - Core - Insecure randomness within 2FA secret generation

CVE-2021-23126

[20210301] - Core - Insecure randomness within 2FA secret generation PUBLISHED

Description (CNA)

An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand() function within the process of generating the 2FA secret.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 3.2.0-3.9.24

No CWE identifiers supplied.

CVE

No English description supplied.