Richard Lawler / The Verge:
Okta fixes a flaw present since July 23, 2024 that, under specific conditions, let users log in with any password if the account’s username had 52+ characters  —  The vulnerability is fixed now, but Okta said that for three months it could’ve been used to access accounts with usernames stretching at least 52 characters long.

Leave a Reply

Your email address will not be published. Required fields are marked *