authentication bypass

Disclosed: 2023-09-29 17:27:40 By xandsz To deptofdefense
Medium
Vulnerability Details
**Description:** hello team! the endpoint https://www.████████/852585B6003EBA25/Login.html?open There is a page to log in! however, it is possible to ignore this page using just a single quote ' let's go! 1: go to https://www.███████/852585B6003EBA25/Login.html?open 2: in the login field put a single quote ' 3: boom! Now you have access to the portal completely ignoring the login and password field!! little video: ███ ## Impact Improper Authentication ## System Host(s) www.█████ ## Affected Product(s) and Version(s) ## CVE Numbers ## Steps to Reproduce let's go! 1: go to https://www.████████/852585B6003EBA25/Login.html?open 2: in the login field put a single quote ' 3: boom! Now you have access to the portal completely ignoring the login and password field!! ## Suggested Mitigation/Remediation Actions
Actions
View on HackerOne
Report Stats
  • Report ID: 2143411
  • State: Closed
  • Substate: resolved
  • Upvotes: 16
Share this report