Launchpad.net

CVE 2019-18985

Pimcore before 6.2.2 lacks brute force protection for the 2FA token.

See the CVE page on Mitre.org for more details.