Import 8.x-1.4 security fix into 2.x

Created on 29 November 2023, 7 months ago

Updated 19 January 2024, 5 months ago

Import security fix from 8.x-1.4 into 2.x dev branch

N/A

Import patch, adjust to changes in 2.x

Users will now be prompted for TFA even if their account does not have the default plugin configured.

None

None

🐛 Bug report

Status

Fixed

Version

2.0

Component

Code

Created by

🇺🇸United States cmlara

Live updates comments and jobs are added and updated live.

Merge Requests

!65Import 8.x-1.4 security fix into 2.x
Merged
🇺🇸United States cmlara
updated 6 months ago

Issue created by @cmlara
Merge request !65Security Fix: Authentication bypass when default plugin is not configured. → (Merged) created by cmlara
Status changed to Fixed 6 months ago12:43am 5 January 2024
Comment 6 months ago →
🇺🇸United States cmlara

cmlara → committed 39a5b222 on 2.x

Issue #3405017: Security Fix: Authentication bypass when default plugin...

Comment 5 months ago →
System Message
Automatically closed - issue fixed for 2 weeks with no activity.

Production build 0.69.0 2024