Top Echelon Software · Report #712318
able to login into login.topechelon.com
Validstatus
highseverity
12upvotes
20 May 2020disclosed
Summary
The support login for our administrative account was using insecure credentials, allowing access to our administrative account. These credentials are not used, so we chose to deactivate the login to prevent access.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.