← All advisories

Critical severity9.8NVD Advisory· Published Nov 10, 2017· Updated Jun 17, 2026

CVE-2017-16634

CVE-2017-16634

Description

In Joomla! before 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication method.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Joomla/Joomla!2 versions
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*range: >=3.2.0,<=3.8.1
- (no CPE)range: <3.8.2
Joomla/Joomla! Security Centrellm-create
Range: <3.8.2

Patches

Vulnerability mechanics

References

3

developer.joomla.org/security-centre/713-20171102-core-2-factor-authentication-bypassnvdPatchVendor Advisory
www.securityfocus.com/bid/101701nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039757nvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.