TikTok · Report #997127
Lack of session expiration after password reset on TikTok Careers Portal
Validstatus
lowseverity
$50bounty
38upvotes
3 Mar 2021disclosed
Summary
A lack of session expiration following a password reset on the TikTok Careers Portal does not automatically log out a user on another device/browser. We thank @gnux for reporting this to our team and confirming the resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.