地图 / The POS Firmware is leaking the root Password which can be used for unauthorized access to the device.

The POS Firmware is leaking the root Password which can be used for unauthorized access to the device.

访问控制 / Unlabeled / #92633

厂商: Shopify
严重程度: 低危
赏金: —
弱点: Unlabeled
研究员: @patrik
披露日期: 2015-10-09
资产: —
CVE: —

该报告还没有中文解读。

时间线

2015-10-06报告提交
2015-10-09公开披露

阅读 HackerOne 原文 ↗作者 @patrik · 版权归作者与 Shopify 所有

同类报告

Email Confirmation Bypass in myshop.myshopify.com that Leads to Full Privilege Escalation to Any Shop Owner by Taking Advantage of the Shopify SSOShopify · 2020-04-01 [Part II] Email Confirmation Bypass in myshop.myshopify.com that Leads to Full Privilege EscalationShopify · 2020-04-01 Broken Access Control leads to disclosure of transaction history via /v2/rechargeTransactionHistory endpointMTN Group · 2025-03-02 [Mail.Ru Android] Typo in permission name allows to write contacts without user knowledgeMail.ru · —Privilege Escalation to Root SSH Access via Pre-Receive Hook Environment in GitHub Enterprise ServerGitHub · 2024-09-13 Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijackingSony · —