Okta Customers Exposed to Risk of Password Theft and Impersonation in PassBleed Attacks

Originally published by Authomize here.
Written by Gabriel Avner, Authomize.
Authomize’s Security Research Lab has uncovered a set of inherent risks in the popular Identity Provider Okta that put users at risk of potential compromise and exploitation.
According to Authomize’s CTO and Co-founder Gal Diskin, the risky security exposure is a flawed yet intentional design that opens the door to exploitation, and not simply a coding mistake.
“Our team discovered this risky architecture durin...

attacks customers exposed impersonation okta password risk theft