View Issue Details

IDProjectCategoryView StatusLast Update
0010457Talerlibeufin-bankpublic2025-10-31 19:49
Reportersebasjm Assigned ToAntoine A Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionfixed 
Target Version1.1Fixed in Version1.1 
Summary0010457: mfa should be the last step [dev/anoinea/2fa]
Descriptioni tried to change my password, old password was wrong.
the server asked me to do the MFA before checking the old password
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Relationships

child of 0010250 closedsebasjm body of tan_challenges stores passwords in the clear? 

Activities

Antoine A

2025-10-07 16:10

manager   ~0026103

Fixed in dddc022c1aab04595f210e71097d68b11ebefbd7

Issue History

Date ModifiedUsernameFieldChange
2025-09-25 15:28sebasjmNew Issue
2025-09-27 10:12darkness-123456Tag Attached: API de billetera
2025-09-27 10:12darkness-123456Tag Attached: cripto
2025-09-27 10:13darkness-123456Tag Attached: lsd0001
2025-09-27 10:13darkness-123456Tag Attached: ngi-entrust-104-08-2022
2025-09-27 10:13darkness-123456Tag Attached: sitio web
2025-09-27 12:58Christian GrothoffTag Detached: API de billetera
2025-09-27 12:58Christian GrothoffTag Detached: ngi-entrust-104-08-2022
2025-09-27 12:58Christian GrothoffTag Detached: sitio web
2025-09-27 12:58Christian GrothoffTag Detached: lsd0001
2025-09-27 12:58Christian GrothoffTag Detached: cripto
2025-09-27 13:00Christian GrothoffAssigned To => Antoine A
2025-09-27 13:00Christian GrothoffStatusnew => assigned
2025-09-27 19:25Christian GrothoffRelationship addedchild of 0010250
2025-10-07 16:10Antoine AStatusassigned => informing
2025-10-07 16:10Antoine AResolutionopen => fixed
2025-10-07 16:10Antoine ANote Added: 0026103
2025-10-18 22:51Christian GrothoffFixed in Version => 1.1
2025-10-18 22:51Christian GrothoffTarget Version => 1.1
2025-10-31 19:49Christian GrothoffStatusinforming => closed