CyberRota Analysis
AI-GeneratedLeantime versions up to 3.6.2 are vulnerable due to inadequate authorization checks in several JSON-RPC methods related to two-factor authentication, allowing any authenticated user to access another user's TOTP secret or disable their 2FA protection. This vulnerability significantly undermines account security and could lead to unauthorized access and account takeover. Organizations using Leantime should prioritize patching this issue to safeguard user accounts against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.TwoFA.getSetupData, saveSecret, verifyAndEnable, and disable2FA, which act on a caller-supplied userId parameter with no ownership check, session pinning, or permission-attribute gate (unlike other RPC-exposed methods in the same dispatcher).