地图 / Session Issue Maybe Can lead to huge loss [CRITICAL]

Session Issue Maybe Can lead to huge loss [CRITICAL]

密码学缺陷 / 密码学问题（通用） / #112496

厂商: Coinbase
严重程度: 未评级
赏金: $1,000
弱点: 密码学问题（通用）
研究员: @bountypls
披露日期: 2016-02-21
资产: —
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（1409 字符中的一小部分）

Hey Coinbase, I have some found some sessions issues linking your web and the coinbase wallet means the android application, So as the user authenticates from the android app An android device linked is shown on this page : https://www.coinbase.com/settings/security_settings

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Coinbase 所有。

时间线

2016-01-23报告提交
2016-02-21公开披露

阅读 HackerOne 原文 ↗作者 @bountypls · 版权归作者与 Coinbase 所有

同类报告

elections.k8s.io uses weak session secret key, may place elections at riskKubernetes · 2025-09-19 · $250 SMTP interaction theft via MITMPortSwigger Web Security · 2020-11-04 Able to change password by entering wrong old passwordStripo Inc · 2019-12-18 HashDoS in V8Node.js · 2025-07-15 The POODLE attack (SSLv3 supported) at status.slack.comSlack · 2018-11-28 SSL certificate not validated when registering with a providerNextcloud · 2021-06-02 · $300

Session Issue Maybe Can lead to huge loss [CRITICAL] · 破甲 POJIA