The Admin Classic Bundle provides a Backend UI for Pimcore. AdminBundleSecurityPimcoreUserTwoFactorCondition introduced in v11 disable the two factor authentication for all non-admin security firewalls. An authenticated user can access the system without having to provide the two factor credentials. This issue has been patched in version 1.2.2.
The use of single-factor authentication can lead to unnecessary risk of compromise when compared with the benefits of a dual-factor authentication scheme.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Admin_classic_bundle | Pimcore | * | 1.2.2 (excluding) |