TYPO3 Core

In case an admin, having MFA disabled, tries to switch to another user (Switch-User) having MFA enabled, he is redirected to the auth_mfa route to verify MFA for the target user.

Explanation
- Having passed MFA successfully is indicated by the "mfa" key set to true in the user session record
- Since the admin, having MFA disabled, did not pass MFA, no such key exists
- When switching user, the admins' session is transformed into the switch-user session, still missing the "mfa" key
- Since the target user has MFA activated and there is no key in the session, the admin is required to pass MFA for the user which is obviously not possible