Sponsor of the Day:
Jerkmate
https://datatracker.ietf.org/doc/html/rfc9588
RFC 9588 - Kerberos Simple Password-Authenticated Key Exchange (SPAKE) Pre-authentication
Kerberos Simple Password-Authenticated Key Exchange (SPAKE) Pre-authentication (RFC 9588, )
authenticated key exchangesimple passwordpre authenticationrfc9588
https://payrange.com/solutions/pre-authentication-retail/
Pre Authentication Retail Products - PayRange
The future of retail is here! Prevent retail theft with a technology platform designed to authenticate the shopper’s proof of purchase to unlock high theft...
pre authenticationretail productspayrange
https://docs.mattermost.com/deployment-guide/server/pre-authentication-secrets.html
Pre-authentication secrets - Mattermost documentation
pre authenticationmattermost documentationsecrets
https://www.vuxml.org/freebsd/09b7cd39-47bd-11ee-8e38-002590c1f29c.html
VuXML: FreeBSD -- OpenSSH pre-authentication double free
vuxml freebsdpre authenticationopensshdouble
https://datatracker.ietf.org/doc/html/rfc6113
RFC 6113 - A Generalized Framework for Kerberos Pre-Authentication
A Generalized Framework for Kerberos Pre-Authentication (RFC 6113, )
pre authenticationrfc6113generalizedframework
https://datatracker.ietf.org/doc/html/rfc5433
RFC 5433 - Extensible Authentication Protocol - Generalized Pre-Shared Key (EAP-GPSK) Method
Extensible Authentication Protocol - Generalized Pre-Shared Key (EAP-GPSK) Method (RFC 5433, )
pre shared keyextensible authenticationrfc5433protocol
https://owncloud.com/security-advisories/authentication-bypass-using-pre-signed-urls/
Authentication Bypass Using Pre-signed URLs - ownCloud
Apr 22, 2024 - Improper validation may allow an attacker to bypass authentication and gain access to users' files. Prior knowledge of a username and a file path is needed in
authentication bypassusing presigned urlsowncloud
https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/
WebDAV Api Authentication Bypass using Pre-Signed URLs - ownCloud
Nov 29, 2023 - Deny the use of pre-signed urls if no signing-key is configured for the owner of the files.
api authenticationbypass usingsigned urlswebdavpre