1 matches found
OpenBao TOTP Secrets Engine Code Reuse
Impact OpenBao's TOTP secrets engine could accept valid codes multiple times rather than strictly-once. This was caused by unexpected normalization in the underlying TOTP library. Patches OpenBao v2.3.2 will patch this issue. In patching, codes which were not normalized strictly N numeric digits...
6.5CVSS6.1AI score0.00209EPSS
SaveExploits0References6Affected Software1
20