Uber · Report #156536
Reading Emails in Uber Subdomains
Validstatus
141upvotes
14 Sept 2016disclosed
Summary
Possibility to read emails from various Uber subdomains. None of the domains exposed were actively being used for Uber email communication to employees or users.
Possibility of reading emails sent to certain Uber domains.
Link to blog: http://blog.pentestnepal.tech/post/149985438982/reading-ubers-internal-emails-uber-bug-bounty
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.