HexBrain

Veris · Report #120289

Critical IDOR - Get anyone's Terminal Data remotely

Validstatus
3upvotes
12 Jun 2016disclosed

How it was found

Hello Team,

I have found a critical IDOR using which an attacker can get anyone's terminal data remotely by just changing the terminal/gatekeeper id.

Proof of Concept: Please find the attached screenshots.

Best Regards,

Hely H. Shah

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original