When an OATH token is used, it should be cached temporarily so that if an attacker attempts to use the same token within the brief time period it is still valid, it will fail.
Version: master
Severity: normal
Description
Description
Details
Details
- Reference
- bz53196
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Parent5446 | T55192 Merge Extension:TwoFactorAuthentication into Extension:OATHAuth | |||
| Resolved | Parent5446 | T55196 Used OATH should be cached to avoid replay attacks |
Event Timeline
Comment Actions
Change 132783 had a related patch set uploaded by Parent5446:
Cache OATH tokens to avoid replay