A significant security flaw has reportedly been detected in identity and access management powerhouse Okta's platform which could have given threat actors access to user login credentials, and ultimately access to any resources or applications they use.
Cybersecurity researchers from Mitiga found that in some cases, Okta presented user passwords in audit logs, stored in plain text. Thus, should an unauthorized third party gain access to those logs, they’d be given the keys to the kingdom. The researchers described this as a post-exploitation attack method.
