1 matches found
New API: Admin can reset passkeys for same-level or higher-privileged users
Summary The admin passkey reset endpoint lacked the role-level authorization check used by comparable privileged account-protection endpoints. A lower-privileged administrator could attempt passkey reset operations against same-level or higher-privileged users, including root-level accounts. Impa...
5.1CVSS5.5AI score
SaveExploits0References5Affected Software1
20