Описание
[POST /v3/users/{id}/password does not verify MFA when MFA rules are configured, allowing account lockout with stolen password alone]
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| keystone | fixed | 2:30.0.0~rc1-2 | package | |
| keystone | no-dsa | trixie | package | |
| keystone | postponed | bookworm | package |
Примечания
https://bugs.launchpad.net/keystone/+bug/2158970