writeups.xyz / From Recon to Bypassing MFA Implementation in OWA by Using EWS Misconfiguration

Submitter : c2a

Date: 19 June 2020

Bounty : 500

Vulnerabilities :

• Information Disclosure
• 2FA / MFA Bypass

Programs :

• Undisclosed

Authors :

• YoKo Kho (@YokoAcc)

Link :
http://www.firstsight.me/2020/06/from-recon-to-bypassing-mfa-implementation-in-owa-by-using-ews-misconfiguration/