Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/08/08 2:42 p.m.13 views

OpenBao TOTP Secrets Engine Code Reuse

Impact OpenBao's TOTP secrets engine could accept valid codes multiple times rather than strictly-once. This was caused by unexpected normalization in the underlying TOTP library. Patches OpenBao v2.3.2 will patch this issue. In patching, codes which were not normalized strictly N numeric digits...

6.5CVSS6.1AI score0.00209EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder