No rate limit on the single sign-on login
Description
The single sign-on login page accepts an unlimited number of password attempts. In the penetration test the tester ran thousands of guesses against a test account without being slowed or locked out. Accounts with weak passwords are therefore open to guessing.
Title
Filename
Uploaded
No files attached yet.