writeups.xyz / Broken Access Control on samsung.com subdomain leads to Mass Account Takeover of Samsung employees application accounts

Submitter : c2a

Date: 18 December 2020

Bounty : undisclosed

Vulnerabilities :

• Information Disclosure
• Account Takeover
• Broken Authorization

Programs :

• Samsung

Authors :

• Gal Nagli (@Naglinagli)

Link :
https://web.archive.org/web/20221001135501/https://galnagli.com/Samsung_Exposure/