Previous Topic: Users with View Privilege Able to Enable or Disable Authentication MechanismNext Topic: Server Crashing When Creating Key Configuration with Invalid Input

CA AuthMinder Release Notes › Defects Fixed › Inconsistency in Authentication Error Messages

Inconsistency in Authentication Error Messages

Symptom:

If authentication failed when using AuthMinder, different error messages were displayed for incorrect user name and incorrect password. This enabled internal users to generate a list of valid contact IDs, thereby speeding up password guessing attacks.

Solution:

This issue has now been resolved. Authentication failure is conveyed using a generic message in case of both incorrect user name and incorrect password.