VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 10, 2024· Updated Jun 17, 2026

CVE-2022-45168

CVE-2022-45168

Description

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /login/backup_code endpoint and the /api/v1/vdeskintegration/createbackupcodes endpoint, because the application allows a user to generate or regenerate the backup codes before checking the TOTP.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Liveboxcloud/Vdesk
    cpe:2.3:a:liveboxcloud:vdesk:*:*:*:*:*:*:*:*
    Range: <=018
  • LIVEBOX Collaboration/vDeskdescription
  • LIVEBOX/vDeskllm-fuzzy
    Range: <=v018

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.