RCE in Flexera Risc Platform

CVE-2021-41527

An error related to the 2-factor authorization (2FA) on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited to bypass the 2FA. The vulnerability requires that the 2FA setup hasn’t been completed.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.004 (31.3th percentile) — read the EPSS interpretation.