Flexera RISC Platform Two-Factor Authentication Bypass Vulnerability

A vulnerability allowing the bypass of two-factor authentication (2FA) has been identified in the Flexera RISC Platform, in versions prior to the saas-2021-12-29 release. This issue arises from an error related to 2FA, which can be exploited if the 2FA setup has not been completed.

Impact

Exploitation of this vulnerability allows users to bypass two-factor authentication, potentially leading to unauthorized access or actions that require 2FA verification.

Remediation

Users can upgrade to the RISC Platform saas-2021-12-29 release, which addresses this vulnerability. Flexera has also acknowledged the vulnerability and its responsible disclosure by Robert Gilbert.