2factor auth bypass

Описание к видео 2factor auth bypass

An attacker can perform an Authentication bypass...
check it before comment this not a bug
Note: Hi there,

Thanks for the report. What you are showing is that the authentication cookies are not being expired on logout. This issue is considered out-of-scope as documented in our vulnerability disclosure policy as it is classified as a low severity vulnerability (P4 or P5) according to Bugcrowd’s Vulnerability Rating Taxonomy. As stated in our policy, we do not pay bounties for such issues.

Best,

Комментарии

Информация по комментариям в разработке