はてなブックマーク

Okta AD/LDAP Delegated Authentication - Username Above 52 Characters Security Advisory Description DescriptionOn October 30, 2024, a vulnerability was internally identified in generating the cache key for AD/LDAP DelAuth. The Bcrypt algorithm was used to generate the cache key where we hash a combined string of userId + username + password. Under a specific set of conditions, listed below, this co