Verify remediation
TSK-1008
-
Last updated
Done
Owner
Hans OverbeekAssignee
Yara VisserRecorded date
Correct recorded date
Created by
Sam de VriesDue
8/3/2026Source
Vulnerability verificationAbout this Vulnerability
VUL-005 — No rate limit on the single sign-on loginThe single sign-on login page accepts an unlimited number of password attempts. In the penetration test the tester ran thousands of guesses against a test account without being slowed or locked out. Accounts with weak passwords are therefore open to guessing.