Localize · Report #7883

Password Policy

Validstatus

2upvotes

18 May 2014disclosed

How it was found

Hi,

There is no password policy implemented which enables the user to perform a simple bruteforce attack on the application to crack the username and password.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original