Now a Linux client can any time login if correct credentials are known. It's the NordVPN server who should ensure that not ANY client can log in without correct 2FA token if it's enabled. Who does not see this as a potential security hole here? But at in any point does the NordVPN client call for 2FA token. have been just modified for privacy purposes.Īlso note note, this happened on the first run on that Linux computer so 2FA should've been enforced. That log is from Linux Mint 20.2 with all the latest patches, kernel and latest version of NordVPN Linux (3.10.0) (normal apt upgrade process done for everything).
You can now connect to VPN by using 'nordvpn nordvpn connect FranceĬonnecting to France #742 ()
Security problem: Linux version of the NordVPN client does not enforce 2FA (Two factor authentication) even it is enabled in user settings.Īfter installation there the Linux NordVPN does not EVER verify the 2FA code.
0 kommentar(er)
