Re: [Freeipa-users] ATTN: CVE-2014-7828

2014-11-07 Thread Martin Kosek
On 11/05/2014 09:43 PM, Alexander Bokovoy wrote: Hi, Heads up for those who are using 2FA feature of FreeIPA 4.0 and 4.1. A security issue was identified in the released versions of FreeIPA 4.0 and 4.1 that makes possible for users with enabled OTP token to authenticate using only the second fac

[Freeipa-users] ATTN: CVE-2014-7828

2014-11-05 Thread Alexander Bokovoy
Hi, Heads up for those who are using 2FA feature of FreeIPA 4.0 and 4.1. A security issue was identified in the released versions of FreeIPA 4.0 and 4.1 that makes possible for users with enabled OTP token to authenticate using only the second factor. We have a fix available already and will be