Rockstar Games · Report #253975
insecure redirect in https://www.rockstargames.com
Validstatus
lowseverity
7upvotes
12 Jun 2020disclosed
Summary
In this report, the researcher identified an insecure redirect from HTTPS to HTTP, going from the Social Club subdomain to the main site. SSL/TLS configuration issues are out of scope, but this was an oversight that needed to be fixed. Our thanks to the researcher for pointing this out to us.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.