CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. See the original NVD description below for full technical details.
CVE
CVE-2023-28316
Severity
CRITICAL
CVSS
9.8
EPSS
0.72%
Original NVD Description
A security vulnerability has been discovered in the implementation of 2FA on the rocket.chat platform, where other active sessions are not invalidated upon activating 2FA. This could potentially allow an attacker to maintain access to a compromised account even after 2FA is enabled.
Related CVEs
Other vulnerabilities affecting the same vendor(s)