LinkedIn · Report #1842183
bypass two-factor authentication.
Validstatus
mediumseverity
41upvotes
1 Aug 2023disclosed
Summary
The researcher found a way to bypass two-factor authentication using the merge-accounts feature, which allowed to log in the victim account without any 2 FA control, provided the credential of victim is known. The issue was resolved.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.