Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

When using 'remember me' option, incorrect realm may be selected #4593

Closed
TheWitness opened this issue Mar 2, 2022 · 1 comment
Closed

When using 'remember me' option, incorrect realm may be selected #4593

TheWitness opened this issue Mar 2, 2022 · 1 comment
Labels
bug Undesired behaviour resolved A fixed issue SECURITY A security issue reported through CVE
Milestone
v1.2.20

Comments

@TheWitness
Copy link
Member

TheWitness commented Mar 2, 2022 •
edited

Describe the bug

Cacti remember-me can not properly support the same user account from multiple realms. This, though a security issue, is pretty minor.

Expected behavior

Less bugs
@TheWitness TheWitness added the bug Undesired behaviour label Mar 2, 2022
@TheWitness TheWitness added this to the v1.2.20 milestone Mar 2, 2022
@TheWitness TheWitness changed the title Cacti 'remember-me' broken in the 1.2.x branch Cacti 'remember-me' does not work with multiple username from different realms Mar 2, 2022
@TheWitness TheWitness added the SECURITY A security issue reported through CVE label Mar 2, 2022
TheWitness added a commit that referenced this issue Mar 2, 2022
@TheWitness
Fixing Issue #4593 - Auth Tokens don't use realm
06a2d42 
Cacti 'remember-me' does not work with identical usernames from different realms
@TheWitness TheWitness changed the title Cacti 'remember-me' does not work with multiple username from different realms Cacti 'remember-me' does not work with identical usernames from different realms Mar 2, 2022
@TheWitness TheWitness added the resolved A fixed issue label Mar 2, 2022
@TheWitness
Copy link
Member Author

We will continue to support the old auth cookies for backwards compatibility, but they will eventually age out.

@netniV netniV changed the title Cacti 'remember-me' does not work with identical usernames from different realms When using 'remember me' option, incorrect realm may be selected Apr 3, 2022
@github-actions github-actions bot locked and limited conversation to collaborators Dec 1, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
bug Undesired behaviour resolved A fixed issue SECURITY A security issue reported through CVE
Projects
None yet
Milestone
v1.2.20
Development

No branches or pull requests
1 participant
@TheWitness