HexBrain

Veris · Report #120288

Critical IDOR - Delete any terminal/gatekeeper of any organization remotely

Validstatus
3upvotes
12 Jun 2016disclosed

How it was found

Hello Team,

I have found a critical IDOR issue due to which an attacker can easily detele any terminal/gatekeeper of any organization by just changing the ID.

Proof of Concept: Please find the attached screenshots.

Best Regards,

Hely H. Shah

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original