DRIVE.NET, Inc. · Report #850938

[www.drive2.ru] Insufficient Security Configurability - The user can using the same password as your current ID.

Validstatus

lowseverity

45upvotes

23 Oct 2020disclosed

Summary

The current username and password can be set the same, making it easy to guess the password.

As a weak password policy issue, The current username and password can be set the same, making it easy to guess the password.

Technical severity	VRT category	Specific vulnerability name	Variant / Affected function
P5	Insufficient Security Configurability	Weak Password Policy

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original