Uploaded image for project: 'Ansible Strategy'
  1. Ansible Strategy
  2. ANSTRAT-665

Allow configuration to allow limits of failed login attempts in a time window

XMLWordPrintable

      Description

       

      This is a feature request

       

      The software does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

      Login forms:

      • https://<address>/#/login
      • https://<address>/api/login

      Steps to Reproduce

      Attempt to login multiple times

      Actual Behavior

      Does not prevent multiple failed authentication attempts or api requests in a short period of time.

      Expected Behavior

      Once a certain number of failed login attempts occur.

              Unassigned Unassigned
              teagle@redhat.com Thomas Eagle
              Votes:
              2 Vote for this issue
              Watchers:
              11 Start watching this issue

                Created:
                Updated:
                Resolved: