Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le juin 01, 2020, 18:00:06

Titre: [Sophos]No password required! “Sign in with Apple” account takeover flaw patched
Posté par: igor51 le juin 01, 2020, 18:00:06

No password required! “Sign in with Apple” account takeover flaw patched

A bug bounty hunter found a way to login using "Sign in with Apple"... but without the part where you have to put in a password.
Source: No password required! “Sign in with Apple” account takeover flaw patched (http://feedproxy.google.com/~r/nakedsecurity/~3/37tPenQ7EqQ/)