description: VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to bypass two-factor authentication. Note: In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS.
problem types: Broken authentication vulnerability
affected:
{
product: Horizon DaaS
vendor: VMware
versions:
status: affected, version: 7.x before 8.0.0
}