Authentication Bypass in Governikus Autent SDK discovered by SEC Consult Vulnerability Lab

Описание: More infos: https://r.sec-consult.com/governikus

The German government-issued identity card (nPA) allows German citizens to not only prove their identity in person, but also against online services (by using the embedded RFID chip). SEC Consult conducted a short security test on a software component commonly used to implement this authentication mechanism. A critical security vulnerability was found.