GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Kevin Beaumont (gossithedog@cyberplace.social)'s status on Saturday, 02-Nov-2024 09:00:36 JSTKevin BeaumontKevin Beaumont

    Remember a few weeks ago when Okta dropped a critical auth bypass vuln they’d been aware of for weeks on a Friday at 11pm?

    Well, they’re back again with another auth bypass dropped on a Friday at 11pm https://infosec.exchange/@SecureOwl/113409933398662230

    In conversationabout a month ago from cyberplace.socialpermalink

    Attachments

    1. No result found on File_thumbnail lookup.
      Mike Sheward (@SecureOwl@infosec.exchange)
      from Mike Sheward
      Okta is really getting into the habit of dropping these gems on a Friday afternoon, and I'm starting to get a bit concerned. "We have discovered and resolved a vulnerability in Okta AD/LDAP DelAuth. For Okta orgs without MFA sign-on policies, and using accounts with usernames of 52 characters or more, this could allow users to authenticate by providing only the username, regardless of the password entered."
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.