Uber · Report #223014
SAML Authentication Bypass on uchat.uberinternal.com
Validstatus
highseverity
$8,500bounty
88upvotes
5 Sept 2017disclosed
Summary
Due to improper SAML verification it was possible to bypass the OneLogin authentication on https://uchat.uberinternal.com and gain unauthorized access to internal chats.
We enjoyed working with @mishre on this report and look forward to receiving more submissions from them in the future!
http://blog.mish.re/index.php/2017/09/06/uber-bug-bounty-gaining-access-to-an-internal-chat-system/
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.