Forum Discussion

catolab's avatar
catolab
Comet
2 months ago

Potential for abuse of the password reset link with https://cc2.catonetworks.com/forgotAdminPassword

Hi, This is Cato Lab from South Korea. Our customer raised a question. Is there any way to prevent malicious actors from repeatedly entering an email address to trigger password reset emails, pote...
michaelsaw's avatar
michaelsaw
Icon for Cato Professional Services rankCato Professional Services
20 days ago

Hi catolab, 

You mentioned an interesting point. 
Perhaps it may be a consideration/idea to track details (such as time, date, source IP address...) when someone starts/triggers reset password in CMA.

Cheers