Actions
SoftPos #7
openTerminal registration OTP can be bypassed
Start date:
12/18/2024
Due date:
% Done:
100%
Estimated time:
Description
Description
To securely register a terminal the admin login with their credentials and then they are asked to
provide an OTP which is sent to their mobile number. It was found that the OTP step is not required
to get a valid authenticated session making the bypass of the OTP step easy to achieve.
Actions