In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user.Referenceshttps://blog.jetbrains.comhttps://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/