Sony · Report #1508661
Response Manipulation leads to Admin Panel Login Bypass at https://██████/
Validstatus
highseverity
25upvotes
12 Sept 2022disclosed
Summary
The researcher reported that the authentication of a Sony endpoint could be bypassed by manipulating the response to a login request. By changing the value of a response parameter, the researcher bypassed the authentication and was able to gain access to an admin portal.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.