Adobe ID - reported as fixed; original findings shown

https://accounts.adobe.com/
Recommended Configuration Email
Alternate Configuration 1 Email; SMS; Authenticator
Alternate Configuration 2 Email; SMS
Alternate Configuration 3
Account/Password Recovery PR SMS; PR email
Remarks email 2FA mandatory
Responses

Notified on January 11, 2020.

Reported as fixed (changed authentication service to disable SMS-based account recovery if SMS-based 2FA is enabled) on January 21, 2020.

img
2fa_signup_step0.png
img
2fa_signup_step1.PNG
img
pr_step0.PNG
img
pr_step1.PNG
img
pr_step2.PNG
img
pr_step3.PNG