Priyank_Parmar

**Name of the Vulnerable Software and Affected Versions** rocket.chat (affected versions not specified) **Description** A security issue has been found in the implementation of 2FA on the rocket.chat platform. When 2FA is activated, other active sessions are not invalidated. This could allow an attacker to keep access to a compromised account even after 2FA is enabled. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.