Richard Lawler / The Verge:
Okta fixes a flaw present since July 23, 2024 that, under specific conditions, let users log in with any password if the account’s username had 52+ characters — The vulnerability is fixed now, but Okta said that for three months it could’ve been used to access accounts with usernames stretching at least 52 characters long.
This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.
Discussion about this post