POJIA破甲
地图 / Authentication bypass in ████████

Authentication bypass in ████████

身份认证 / Authentication Bypass Using an Alternate Path or Channel / #1747146

厂商
MTN Group
严重程度
高危
赏金
—
弱点
Authentication Bypass Using an Alternate Path or Channel
研究员
@roland_hack
披露日期
2022-12-02
资产
mtnbusiness.com.ng
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(1227 字符中的一小部分)
Summary: In a nutshell, an authentication bypass exploits weak authentication mechanisms to allow a hacker to access your systems and data.In a nutshell, an authentication bypass exploits weak authentication mechanisms to allow a hacker to access your systems and data

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 MTN Group 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @roland_hack · 版权归作者与 MTN Group 所有

同类报告

Ability to bypass email verification for OAuth grants results in accounts takeovers on 3rd partiesGitLab · 2020-10-01 · $3,000Mass Account Takeover at https://app.taxjar.com/ - No user InteractionStripe · 2022-07-11Mass Accounts Takeover Without any user Interaction at https://app.taxjar.com/Stripe · 2022-10-19Account Takeover via Authentication Bypass in TikTok Account RecoveryTikTok · 2024-07-13 · $12,000total Failure of password protection while extracting seed phrase! increases attack surface area for scammersMetaMask · 2025-07-31 · $3,500Authentication Bypass Leads To Complete Account TakeveOver on ██████████MTN Group · 2024-09-14