75
My security team come to test MSCRM application (IFD ADFS) in case "cookie replay attack".
When user signout from CRM and they snap request and cookies then use it to replay request for teset case "cookie replay attack".
They able to get data from crm !!!.In this case application is fail in security test.
How should i do to fix it to check user is authenticated before allowed to call other service.
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
#1
André Arnaud de Cal...
291,280
Super User 2024 Season 2
#2
Martin Dráb
230,214
Most Valuable Professional
#3
nmaenpaa
101,156
Share
Report
All responses (
Answers (