Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Insecure Two-Factor-Authentication settings modification #9391

Closed
CyberCtzn opened this issue May 5, 2023 · 1 comment
Closed

Insecure Two-Factor-Authentication settings modification #9391

CyberCtzn opened this issue May 5, 2023 · 1 comment

Comments

@CyberCtzn
Copy link

Overview

Having set up a YubiKey for my Two-Factor-Authentication i noticed that a confirmation through the set up second-factor is not required when making changes to security-settings within that KeePassXC-Database.

Steps to Reproduce

  1. In Database-settings/Security set up a YubiKey Challenge-Response
  2. Create a new Entry
  3. Confirm with YubiKey Challenge-Response
  4. Go back to Database-settings/Security
  5. Remove YubiKey Challenge-Response

Expected Behavior

Imperative authentication through YubiKey Challenge-Response when making security-related changes to database settings.

Actual Behavior

No Two-Factor-Authentication required, while it is set up.

Context

This is a similar but different issue like 9339.

KeePassXC - 2.7.4
Operating System: Linux

@droidmonkey
Copy link
Member

It's the same as the linked issue "change password"

@droidmonkey droidmonkey closed this as not planned Won't fix, can't repro, duplicate, stale May 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants