/cdn.vox-cdn.com/uploads/chorus_asset/file/25299201/STK453_PRIVACY_B_CVirginia.jpg?w=1200&resize=1200,628&ssl=1 "An Okta login bug bypassed checking passwords on some long usernames")
On Friday night, Okta posted an odd update to its list of security advisories. The newest entry reveals that underneath particular circumstances, somebody might’ve logged in by getting into something for a password, however provided that the account’s username had over 52 characters.
In response to the note people reported receiving, different necessities to take advantage of the vulnerability included Okta checking the cache from a earlier profitable login, and that a corporation’s authentication coverage didn’t add further circumstances like requiring multi-factor authentication (MFA).
Listed below are the main points which are presently accessible:
On October 30, 2024, a vulnerability was internally recognized in producing the cache key for AD/LDAP DelAuth. The Bcrypt algorithm was…
Source link
#Okta #login #bug #bypassed #checking #passwords #lengthy #usernames
/cdn.vox-cdn.com/uploads/chorus_asset/file/25299201/STK453_PRIVACY_B_CVirginia.jpg?w=1200&resize=1200,628&ssl=1&description=An%20Okta%20login%20bug%20bypassed%20checking%20passwords%20on%20some%20long%20usernames){kind=link}