this post was submitted on 04 Nov 2024
1 points (100.0% liked)

cybersecurity

10 readers
1 users here now

This subreddit is for technical professionals to discuss cybersecurity news, research, threats, etc.

founded 1 year ago
MODERATORS
[email protected]
1
Okta auth bypass vuln (zerobytes.monster)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink hide all child comments
 
The original post: /r/cybersecurity by /u/rpo5015 on 2024-11-03 19:52:18.

Just saw this one this morning — oof

TLDR; if your username is over 52 chars you could reuse the stored cache key without providing a password

https://www.forbes.com/sites/daveywinder/2024/11/02/username-over-52-characters-no-password-required-says-okta/

no comments (yet)
sorted by: hot top controversial new old
there doesn't seem to be anything here