Summary
Authentication was already performed for this emake client connection.
Description
Emake should not perform redundant authentication on a connection.
Security Exposure
This message issues only on an authenticated communications channel. We do not currently defend against TCP injection attacks, and any information provided by this message would be the least of the exploits possible in such a scenario. If we later add defenses against such attacks, then an attacker would not have the ability to trigger this message (without having already gained authenticated access), and so the information it provides would be harmless.
Reasons
A bug in the code.
Fixes
Contact Electric Cloud.
Comments