Cpe:2.3:a:ikaros:ikaros:1.2.0:*:*:*:*:*:*:*

Ikaros versions 1.2.0 through 1.2.5 are vulnerable to an authentication bypass where attackers with valid passwords can circumvent TOTP requirements by manipulating temporary login tokens.