The "Forget Openid" functionality allows a user to retrieve their openid, username if they provide their email. Currently, this functionality both emails the information to the user, but also displays it online. The online display could be used to guess user credentials and execute a brute-force attack.
Who: NOAA security
The "Forget Openid" functionality allows a user to retrieve their openid, username if they provide their email. Currently, this functionality both emails the information to the user, but also displays it online. The online display could be used to guess user credentials and execute a brute-force attack.