POJIA破甲
地图 / "Test target" of the "HTTP target" extension can unintentionally send username and password in the Authorization header

"Test target" of the "HTTP target" extension can unintentionally send username and password in the Authorization header

密码学缺陷 / 敏感信息明文传输 / #536669

厂商
Zendesk
严重程度
未评级
赏金
—
弱点
敏感信息明文传输
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 Zendesk 所有

同类报告

Reflected XSS and sensitive data exposure, including payment details, on lioncityrentals.com.sgUber · 2020-04-30 · $4,000Password Reset Link Leaked In Refer Header In Request To Third Party SitesNord Security · —Cleartext Transmission of Sensitive Information Leads to administrator accessHelium · 2020-05-30fetlife.com/signup_step_profile expose access_token of mapbox.comFetLife · 2023-11-01Cleartext Transmission of password via EmailSheer · 2024-04-22 · $200Sensitive Info Leak - An Attacker Can Retrieve All the Users Mobile Numbers at https://website-api.production.curve.app/api/waitlist/usCurve · 2020-10-23