unlock self-lock by brute force
Medium
V
Valve
Submitted None
Team Summary
Official summary from Valve
Due to a missing protection on the self account unlock feature, self unlock codes could be bruteforced - leading to unrestricted access to the account. The endpoint issue has been corrected.
Actions:
Reported by
manshum12
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Bounty
$900.00
Submitted
Weakness
Improper Restriction of Authentication Attempts