writeups.xyz / Authentication bypass on Ubiquity’s Single Sign-On via subdomain takeover

Submitter : c2a

Date: 29 November 2016

Bounty : 500

Vulnerabilities :

• Subdomain Takeover
• Authentication Bypass

Programs :

• Ubiquity Networks

Authors :

• Arne Swinnen (@ArneSwinnen)

Link :
https://www.arneswinnen.net/2016/11/authentication-bypass-on-sso-ubnt-com-via-subdomain-takeover-of-ping-ubnt-com/