Auth0 authentication bypass issue exposed enterprises to hack

Minimalist · Apr 8, 2018

Auth0, one of the biggest identity-as-a-service platform is affected by a critical authentication bypass vulnerability that could be exploited by attackers to access any portal or application which are using it for authentication.

Auth0 implements a token-based authentication model for a large number of platforms, it managed 42 million logins every day and billions of login per month for over 2000 enterprise customers.
Click to expand...

https://securityaffairs.co/wordpress/71175/hacking/auth0-authentication-bypass.html

Minimalist · Jun 7, 2018

Auth0 Glitch Allows Attackers to Launch Phishing Attacks

Researchers are warning of a glitch in the Auth0 identity-as-a-service offering, which could allow bad actors to spoof a legitimate website and collect sensitive information from visitors.
Click to expand...

https://threatpost.com/auth0-glitch-allows-attackers-to-launch-phishing-attacks

Minimalist · Jun 12, 2018

Imperva Claims About Auth0 Are Misleading At Best

It turns out that the “flaws” described are not really flaws at all. They’re features and capabilities that are part of the platform—and that are not unique to Auth0. There is no cross-site scripting vulnerability—even by Imperva’s own definition—and the phishing attack, while technically possible, is just not news. You could execute a similar attack against any company on just about any platform, and Auth0 has security controls in place that would ostensibly detect such a scam if it were real.
Click to expand...

https://www.forbes.com/sites/tonybr...rva-claims-about-auth0-are-misleading-at-best

Log in or Sign up

Auth0 authentication bypass issue exposed enterprises to hack

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Log in or Sign up

Auth0 authentication bypass issue exposed enterprises to hack

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Useful Searches