Known vulnerabilities in Two-factor Authentication (TFA)

Vendor: coltrane
Software: Two-factor Authentication (TFA)
Software CPE: cpe:2.3:a:coltrane:tfa:*:*:*:*:*:drupal:*:*
Website: https://www.drupal.org/u/coltrane
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Two-factor Authentication (TFA) Two-factor Authentication (TFA) is affected by 4 known vulnerabilities: 3 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113371 - Privilege Defined With Unsafe Actions
CVE-2025-7030		 CWE-267 Low
No
No
 1.11.0 29.07.2025 SB2025072919
#VU105370 - Improper Access Control
 CWE-284 Medium
No
No
 1.10.0 06.03.2025 SB2025030602
#VU97989 - Session Fixation
 CWE-384 Medium
No
No
 7.x-2.4, 8.x-1.8 03.10.2024 SB2024100307
#VU85783 - Improper Access Control
 CWE-284 Medium
No
No
 8.x-1.5 25.01.2024 SB2024012502