Samsung fixes flaws that could have let attackers hijack your account

guest · Dec 12, 2018

Samsung fixes flaws that could have let attackers hijack your account
December 12, 2018
https://nakedsecurity.sophos.com/20...could-have-let-attackers-hijack-your-account/

A recently patched trio of flaws in Samsung’s mobile site was leaving users vulnerable to attackers who could have reset their user passwords and hijacked their accounts, The Register reports.
The flaws were found by security researcher Artem Moskowsky, who said that they were all cross-site request forgery (CSFR), or, alternatively, XSRF, bugs.

The Register reports that in one proof of concept, Moskowsky showed how an attacker could exploit the CSRF flaw to change security questions – and answers – to whatever they want. From there, it would have been an easy hop to reset the password and take over a Samsung account.

It reportedly paid Moskowsky a total of $13,300 for the three vulnerabilities, which were rated medium, high, and critical.
Click to expand...

Log in or Sign up

Samsung fixes flaws that could have let attackers hijack your account

guest Guest

Log in or Sign up

Samsung fixes flaws that could have let attackers hijack your account

guest Guest

Useful Searches