With an active session token, the attacker successfully hijacked multiple active user sessions and convinced the VPN concentrator that he/she was legitimately authenticated. The attack bypassed both the organization’s multifactor authentication and the VPN client software used to validate that systems connecting to the VPN were owned by the organization and running specific security software. Ayep.
Posted on: Fri, 18 Apr 2014 18:26:31 +0000
Trending Topics
Recently Viewed Topics
© 2015