Facebook User ID Bypass Issue

Discussion in 'News Aggregator' started by Packet Storm, 10 Aug 2016.

  1. Packet Storm

    Packet Storm Guest

    A vulnerability allowed remote attackers to determine which specific Facebook user ID is linked with a mobile phone number without secure approval. The vulnerability is located in the ctx and recover lwv parameters and /login/identify modules.

    Continue reading...
     

Share This Page

Loading...