1
0
mirror of https://github.com/Yubico/yubico-pam.git synced 2025-01-20 10:52:16 +01:00
Thomas Patzke 0d61b263ca Security: Storage of challenges in path with restricted permissions
The previous instructions create a global word-writeable path for challenge files. This is a security issue because all users and unprivileged processes can create challenge files for arbitrary users. This enables an attacker to bypass the second factor for authentication.
2017-02-23 09:01:27 +01:00
..
2014-10-30 11:15:06 +01:00