Bypass of Two-Factor Authentication in cPanel by cPanel, Inc.

CVE-2020-29136

Summary

In cPanel prior to version 90.0.17, a vulnerability exists that allows attackers to bypass the two-factor authentication mechanism through a brute-force approach. This flaw could enable unauthorized access to user accounts, creating significant security risks for users relying on 2FA for protection. It is critical for users to update their cPanel installations to mitigate the potential exploitation of this security weakness.

References