Unknown · Abacus Erp · CVE-2022-1065
**Name of the Vulnerable Software and Affected Versions**
Abacus ERP versions prior to v2022 R1 of 2022-01-15
Abacus ERP versions prior to v2021 R4 of 2022-01-15
Abacus ERP versions prior to v2020 R6 of 2022-01-15
Abacus ERP v2019 versions later than R5 (service pack)
Abacus ERP v2018 versions later than R5 (service pack)
**Description**
A vulnerability within the authentication process of Abacus ERP allows a remote attacker to bypass the second authentication factor.
**Recommendations**
For Abacus ERP versions prior to v2022 R1 of 2022-01-15, update to v2022 R1 of 2022-01-15 or later.
For Abacus ERP versions prior to v2021 R4 of 2022-01-15, update to v2021 R4 of 2022-01-15 or later.
For Abacus ERP versions prior to v2020 R6 of 2022-01-15, update to v2020 R6 of 2022-01-15 or later.
For Abacus ERP v2019 versions later than R5 (service pack), consider applying additional security measures until a patch is available.
For Abacus ERP v2018 versions later than R5 (service pack), consider applying additional security measures until a patch is available.