CVE-2025-25450

n/a / n/a PUBLISHED

Description (CNA)

An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to escalate privileges via the deactivation of the activated second factor to the /session endpoint

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://piuswalter.de/blog/2fa-bypass-and-deactivation-attack-in-mytaag/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.