U.S. Dept Of Defense · Report #187705
Authentication bypass vulnerability on a DoD website
Validstatus
criticalseverity
12upvotes
15 Feb 2017disclosed
Summary
A Department of Defense website was exposed to an authentication bypass vulnerability which could have allowed an unauthenticated user to browse the website as an authenticated user. Thanks to @spam404 for discovering this vulnerability!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.