📜 ⬆️ ⬇️

The secure notes service OneLogin Secure Notes has been compromised

The OneLogin Secure Notes service, which provides users with the ability to securely create notes using strong encryption, has been compromised . The service had a vulnerability that allowed OneLogin employees to obtain user note data in the clear. The attacker took advantage of the attacker, who managed to get the account information of one of the employees and successfully authenticate to the system. An attacker could view the notes that were updated by users in the period from July 25 to August 25, 2016. OneLogin began the process of notifying users whose notes could potentially be compromised.

The company reports that the vulnerability itself has been fixed, and account passwords have been reset.


')

Source: https://habr.com/ru/post/309056/


All Articles