Password reset by malicious input on air.line.me
L
LY Corporation
Submitted None
Team Summary
Official summary from LY Corporation
Due to the bug in the account verification process in the password reset function of air.line.me, it was possible to change other's passwords if a temporary password reset key was set to a space.
Actions:
Reported by
tosun
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Improper Access Control - Generic