Forum Discussion

catolab's avatar
catolab
Icon for Joining the Conversation rankJoining the Conversation
3 months ago

Potential for abuse of the password reset link with https://cc2.catonetworks.com/forgotAdminPassword

Hi, This is Cato Lab from South Korea. Our customer raised a question. Is there any way to prevent malicious actors from repeatedly entering an email address to trigger password reset emails, pote...
michaelsaw's avatar
michaelsaw
Icon for Cato Professional Services rankCato Professional Services
2 months ago

Hi catolab, 

You mentioned an interesting point. 
Perhaps it may be a consideration/idea to track details (such as time, date, source IP address...) when someone starts/triggers reset password in CMA.

Cheers