The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP validation service with a non-default configuration such as an open sync pool; the issue does NOT affect YubiCloud.
Source link
RELATED STORIES
We are greeting further cooperation with all parts of security services. If you are interested...
Security fix ——————————————————————————– Fedora Update Notification FEDORA-2020-cbebc5617e 2020-07-11 01:03:04.330810 ——————————————————————————– Name : squid Product :...
Jul 10, 2020 8:01 pm EDT
Categorized: High Severity Share this post: Synthetic...
Last week, I posted about my breast cancer diagnosis on Facebook. Since then, my Facebook...
Jul 10, 2020 8:00 pm EDT
Categorized: High Severity Share this post: There...
Jul 10, 2020 8:00 pm EDT
Categorized: Medium Severity Share this post: Cross...
Jul 10, 2020 8:00 pm EDT
Categorized: Medium Severity Share this post: IBM...
Jul 10, 2020 8:00 pm EDT
Categorized: Medium Severity Share this post: IBM...
Executive Summary Informations Name CVE-2020-11081 First vendor Publication 2020-07-10 Vendor Cve Last vendor Modification 2020-07-10...
Published: 2020-07-07 Description: A remote code execution vulnerability in MobileIron Core and Connector versions 10.6...