DRIVE.NET, Inc. · Report #835138
[www.drive2.ru] Insufficient Security Configurability - Email notification is not being sent while changing passwords
Validstatus
lowseverity
16upvotes
22 Oct 2020disclosed
Summary
Email notification was not sent while changing passwords. This issue was fixed.
Best Practices As recommended practices, Due to missing notification email when changing password, If the password has been maliciously changed, the user will not be able to notice it, so immediate security measures cannot be taken.
| Technical severity | VRT category | Specific vulnerability name | Variant / Affected function |
|---|---|---|---|
| P5 | Insufficient Security Configurability | Lack of Notification |
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.