Topic604 problems· 5 reviewed

Identity And Access

604 incident problems about Identity And Access. Start with the reviewed ones.

All problems (604)

SECURITY-1592A Turnstile secret rotates and one worker still verifies with the old keyOne worker still verifies Turnstile with the old secret after rotation.SecurityIntermediate8 minPro SECURITY-1602A Turnstile secret rotation is complete and one page still rejects humansOne page still rejects humans after Turnstile secret rotation.SecurityIntermediate8 minPro SECURITY-1572A Turnstile verification secret rotates and one edge still uses the old keyOne edge still verifies Turnstile with the old secret after rotation.SecurityIntermediate8 minPro SECURITY-1579An authselect profile updates and one host still denies MFAOne host still denies MFA after authselect profile updates.SecurityIntermediate8 minPro SECURITY-1562A Cloudflare Access rule is tightened and one path still bypasses MFAOne app path bypasses MFA after tightening Cloudflare Access.SecurityIntermediate9 minPro CICD-1554A Jenkins controller rotates credentials and one agent still clones with the retired tokenOnly fresh Jenkins pod agents fail to clone after a credential rotation.CI/CDIntermediate9 minPro SECURITY-1566A JWKS key set rotates and one verifier still trusts the old keyOne verifier continues trusting a retired JWKS key after rotation.SecurityIntermediate9 minPro LINUX-1522A sudo drop-in looks correct and automation still loses privilegePrivilege escalation fails only after config sync to one bastion host.LinuxAdvanced9 minPro LINUX-1532A sudo drop-in looks correct and privilege still failsPrivilege escalation fails only after config sync to one bastion.LinuxAdvanced9 minPro LINUX-1603A sudo hardening change is correct and one automation user still runs the old binaryOne automation user still invokes the wrong binary after sudo hardening.LinuxAdvanced9 minPro LINUX-1502A sudo include file looks correct and automation still loses rootAutomation starts failing after a sudo include file is edited from a different workstation.LinuxAdvanced9 minPro LINUX-1492A sudo rule looks correct and automation still loses rootAutomation that relies on a sudo include file starts failing after the file is edited from a different workstation.LinuxAdvanced9 minPro LINUX-1512A sudoers drop-in looks correct and automation still loses privilegePrivilege escalation fails only after config synchronization to one bastion.LinuxAdvanced9 minPro LINUX-1551A sudoers include is fixed and one host still denies deploy commandsOnly one host still denies deployment sudo commands after a sudoers fix.LinuxIntermediate9 minPro SECURITY-1484A Cloudflare Access app validates JWTs and one service still denies usersAccess works at the edge and one backend still rejects requests after an Access application rename.SecurityIntermediate10 minPro SECURITY-1552A Cloudflare Access policy is tightened and one admin path still bypasses MFAOne admin path bypasses MFA after tightening Cloudflare Access rules.SecurityIntermediate10 minPro CICD-1571A GitHub deploy is approved and one environment still blocksOne protected environment keeps using the wrong value after moving secrets to environments.CI/CDAdvanced10 minPro SECURITY-1556A JWKS rotation succeeds and one verifier still accepts the retired keyA verifier keeps accepting a retired JWKS key after rotation.SecurityIntermediate10 minPro K8S-1572A Karpenter node class updates and one nodegroup still launches with the old profileOne Karpenter nodegroup launches with the old instance profile after a rename.KubernetesIntermediate10 minPro SECURITY-1466A SAML ACS route verifies signatures and still fails destination checksSAML sign-in fails only after a reverse proxy cleanup removed explicit external port handling.SecurityIntermediate10 minPro