Legal Robot · Report #251200
Missing Issuer parameter on TOTP 2FA
Validstatus
9upvotes
20 Aug 2017disclosed
Summary
During our 2FA challenge, a security researcher discovered that the Issuer parameter was not set in the TOTP URL that gets turned into a QR Code. While there is no direct security impact, it does make 2FA software tokens more difficult to manage.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.