View previous topic :: View next topic |
Author |
Message |
sfulton
Joined: 26 Jul 2018 Posts: 1
|
Posted: Thu Jul 26, 2018 1:32 pm Post subject: License Key Authenticated with Incorrect Key |
|
|
I am able to authenticate through the authentication server with an incorrect key.
For example, Let's say my key is XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XX. I can also get authenticated with XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXJ where J is any character. So we need the correct license key, but then you can append any character after the correct license key and still be authenticated. |
|
Back to top |
|
|
Infralution
Joined: 28 Feb 2005 Posts: 5027
|
Posted: Sun Jul 29, 2018 11:41 pm Post subject: |
|
|
This is a known issue when using Base32 encoding for the key. It is not really an problem - because you have to actually know a valid key in order to be able to append a character - so it does not represent a vulnerability. _________________ Infralution Support |
|
Back to top |
|
|
|