Broken Authendication And Session Management
R
Reddit
Submitted None
Actions:
Reported by
kedibeauty
Vulnerability Details
Technical details and impact analysis
## Summary:
Broken Authendication And Session Management On reddit.com
Here I'm Using 2 Browsers
1.Chrome (victim Browser)
2.Firefox(attacker browser)
## Steps To Reproduce:
1. Login your Account (Chrome Browser)
2. Copy Cookies
3. Paste it in firefox Browser and reload
4. you login without username and password
## Supporting Material/References:
* broken auth POC.mkv
## Impact
An attacker can access victim account without entering username and password
Report Details
Additional information and metadata
State
Closed
Substate
Not-Applicable
Submitted
Weakness
Improper Access Control - Generic