Hello,
a user “simvirus” on this mailing list discovered a bug in the policy
scope=authentication, action=passOnNoUser.
If you are using such a policy, please read the advisory and update
immediately.
https://www.privacyidea.org/bug-passonnouser-policy-allows-arbitrary-authentication/
Kind regards
Cornelius–
Cornelius Kölbel
@cornelinux
+49 151 2960 1417
NetKnights GmbH
http://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798
Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel