HexBrain

Sony · Report #1508661

Response Manipulation leads to Admin Panel Login Bypass at https://██████/

Validstatus
highseverity
25upvotes
12 Sept 2022disclosed

Summary

The researcher reported that the authentication of a Sony endpoint could be bypassed by manipulating the response to a login request. By changing the value of a response parameter, the researcher bypassed the authentication and was able to gain access to an admin portal.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original