Loading HuntDB...

Users can access exams in course without having to subscribe to PREMIUM

Medium
L
LinkedIn
Submitted None

Team Summary

Official summary from LinkedIn

The researcher was able to identify an Improper Access Control issue in the Learning Exams section, allowing a malicious user without a premium account to successfully take exams and complete them.

Reported by find_me_here

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Improper Access Control - Generic