bitaccess · Report #130460
BYASSING OTP Verification
Validstatus
34upvotes
22 Jun 2016disclosed
Summary
OTP was not properly checked on the session so it could have been bypassed by intercepting the server response and changing its value to valid.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.