Comment 5 for bug 1688137

Revision history for this message
Samuel de Medeiros Queiroz (samueldmq) wrote : Re: Attacker may use PCI-DSS 8.1.6 and 8.1.7 to lock out users indefinitely

I have updated the bug title and description to include what I stated on comment #1, which goes beyond than just using the self-service password API for the attack.