Description
KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | linotp | < 2.11.1 | 2.11.1 | GHSA-rqg8-xjp2-pg9w |
High · 8.1
CVE-2019-12887
EUVD-2019-0076GHSA-rqg8-xjp2-pg9wPYSEC-2019-103
LinOTP replay vulnerability with auto resynchronization enabled for TOTP token
Published Jun 27, 2019 · Updated Aug 4, 2024 · Assigned by mitre