HexBrain

Legal Robot · Report #249398

Password complexity not evenly enforced

Validstatus
lowseverity
12upvotes
26 Aug 2017disclosed

Summary

A security researcher discovered that our password complexity requirements were not properly enforced during account registration, as they were during password reset.

Minor issue but i appreciate the response time, It's really nice working with @danrubins , his very good and humble attitude is much appreciated, thanks for the bounty and bonus :)

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original