LinOTP replay vulnerability with auto resynchronization enabled for TOTP token

LinOTP is prone to a replay attack with activated automatic resynchronization. This vulnerability may allow an attacker to successfully log in with OTP values recorded at a previous point in time. This attack is only possible if automatic resynchronization is enabled for the TOTP token type. The...

GHSA-RQG8-XJP2-PG9W LinOTP replay vulnerability with auto resynchronization enabled for TOTP token

LinOTP is prone to a replay attack with activated automatic resynchronization. This vulnerability may allow an attacker to successfully log in with OTP values recorded at a previous point in time. This attack is only possible if automatic resynchronization is enabled for the TOTP token type. The...

PT-2019-12999

Name of the Vulnerable Software and Affected Versions LinOTP versions prior to 2.10.5.3 Description The issue allows for a replay attack when automatic resynchronization is enabled for the TOTP token type, potentially enabling an attacker to log in with previously recorded OTP values. This attack...