Bug #99864
closedNotify by email on login not working after user activates MFA
100%
Description
There is a backend user setting “notify by email on login” which is considered “personal tab” not “account security”.
This works fine, unless the user activates MFA/OTP. Then, no matter if the notify option is set or not, no mail is sent on login.
IMHO this is no security problem, however that is not for me to consider, thus better be safe and post this as a private issue.
Updated by Oliver Hader almost 2 years ago
Seems to be a bug then. This is not considered a vulnerability, since it has no impact on confidentiality, integrity or availability.
Updated by RVVN no-lastname-given over 1 year ago
- Related to Bug #100128: AdminLoginWarning email not sent when MFA is activated added
Updated by Benni Mack over 1 year ago
- Related to Bug #100129: Hook "postLoginFailureProcessing" is not called when MFA TOTP verification failed added
Updated by Gerrit Code Review over 1 year ago
- Status changed from New to Under Review
Patch set 1 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/79805
Updated by Oliver Bartsch over 1 year ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset 3a89a232ac1e8e751283b9fccb43fd0b6be2887e.
Updated by Gerrit Code Review over 1 year ago
- Status changed from Resolved to Under Review
Patch set 1 for branch 12.4 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/79807
Updated by Oliver Bartsch over 1 year ago
- Status changed from Under Review to Resolved
Applied in changeset 6bf0d254c1d9757a9547751aa5bcde868709b5d0.
Updated by Stefan Bürk 3 months ago
- Related to Bug #104809: Exception in BE login notification with f:translate in custom SystemEmail layout added