A two-factor code used to reset an account password could be easily bypassed. …read more

Source:: ZDNet