In Joomla! before 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication method.

According to its self-reported version number, the detected Joomla! application is affected by an authentication bypass and multiple information disclosure vulnerabilities.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the Joomla! installation running on the remote web server is 1.5.0 or later but prior to 3.8.2. It is, therefore, affected by an authentication bypass and multiple information disclosure vulnerabilities.

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
98475	Joomla! 1.5.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
98474	Joomla! 1.6.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
98473	Joomla! 1.7.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
98472	Joomla! 2.5.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
98471	Joomla! 3.0.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
98470	Joomla! 3.1.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
98469	Joomla! 3.2.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
98468	Joomla! 3.3.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
98467	Joomla! 3.4.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
98466	Joomla! 3.5.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
98465	Joomla! 3.6.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
98464	Joomla! 3.7.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
98463	Joomla! 3.8.x < 3.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	critical
104478	Joomla! 1.5.0 < 3.8.2 Multiple Vulnerabilities	Nessus	CGI abuses	critical

Detections

Analytics

CVE-2017-16634

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical