Acronis · Report #972045
No brute force protection on web-api-cloud.acronis.com
Validstatus
lowseverity
$100bounty
11upvotes
24 Jun 2021disclosed
Summary
There was no brute force protection on https://web-api-cloud.acronis.com/api/idp/v1/token endpoint.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.