CyberRota Analysis
AI-GeneratedLogto's failure to enforce locally configured multi-factor authentication (MFA) during single sign-on (SSO) authentication allows users to bypass essential second-factor security measures, potentially leading to unauthorized access to sensitive systems. Organizations utilizing Logto for authentication should prioritize addressing this vulnerability to mitigate the risk of credential compromise and unauthorized data access. Immediate action is crucial for any entity relying on Logto for secure user authentication.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Logto does not enforce locally configured MFA during SSO authentication, allowing users to bypass second-factor requirements and grants unauthorized access.