This is already fixed in 10530 build.
To Confirm the issue.
- Goto ./webapps/ROOT/WEB-INF/web.xml
- Search for the url-pattern /RestAPI/WC/TwoFactorAction
- If that is present, goto -> ./webapps/ROOT/WEB-INF/struts-config.xml
- Search for path="/TwoFactorAction"
If that is present, then the cause is confirmed. Struts file needs to be modified.