digitalpersona u.are.u sdk for windows 2.2.0

This value is then used to fetch the user that attempted to login, and lookup their two-factor authentication token. This controller looks for a request input parameter called `confirmation_token` which is expected to be a 64 character random alpha-numeric string that references a value within the Panel's cache containing a `user_id` value. This authentication flaw is present in the method which handles two-factor authentication for a user. Due to a validation flaw in the logic handling user authentication during the two-factor authentication process a malicious user can trick the system into loading credentials for an arbitrary user by modifying the token sent to the server. The malicious user must target an account with two-factor authentication enabled, and then must provide a correct two-factor authentication token before being authenticated as that user. In rare cases this can allow a malicious actor to authenticate as a random user in the Panel. A malicious user can modify the contents of a `confirmation_token` input during the two-factor authentication process to reference a cache value not associated with the login attempt.

Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go.

Digitalpersona u.are.u sdk for windows 2.2.0