CVE-2023-49075

CVE-2023-49075 affects the Pimcore Admin Classic Bundle, specifically versions prior to 1.2.2, where a vulnerability in the AdminBundle\Security\PimcoreUserTwoFactorCondition disables two-factor authentication for non-admin security firewalls. This allows an authenticated user to bypass 2FA and access the system. The vulnerability has a CVSS score of 7.2 (High) due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.