Lucene search

K
huntrNehalr7779F746881-AD42-446B-9B1D-153391EACC09
HistoryDec 20, 2022 - 3:27 p.m.

No notification triggered on sensitive actions like adding SSH key

2022-12-2015:27:05
nehalr777
www.huntr.dev
5
sensitive actions
ssh key
notification
security feature

0.002 Low

EPSS

Percentile

53.1%

Description

Adding SSH key is a sensitive action . As the application triggers a notification on all sensitive actions like email change/password reset , SSH key is also an important security feature to be notified about

Proof of Concept

1) Go to https://rdiffweb-dev.ikus-soft.com/prefs/sshkeys
2) Do all necessary steps to successfully add a SSH key
3) Check the inbox of your registered email
4) You will notice that there is no notification triggered on this security endpoint 



0.002 Low

EPSS

Percentile

53.1%

Related for 9F746881-AD42-446B-9B1D-153391EACC09