Vulnerability
vulnerability:gmail_cookie_validation_vulnerability
Also: Gmail bug, fake cookies
A Gmail recovery weakness involving forged or manipulated cookies that made the reset process appear to recognize a prior login.
A Gmail recovery weakness involving forged or manipulated cookies that made the reset process appear to recognize a prior login.
“So, Joseph decided to make fake cookies.”
“it would appear that way for any account”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | Gmail | Explicit | 118 |
| incoming | EXPLOITS | Joseph Harris | Explicit | 118 |
Joseph Harris EXPLOITS Gmail cookie-validation vulnerability
Joseph used fake cookies to make Gmail believe he had previously logged into a victim’s account, enabling password resets.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I was able to get it so it would appear that way for any account”
Gmail cookie-validation vulnerability AFFECTS Gmail
The cookie-validation vulnerability affected Gmail’s password-recovery process.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“One day, he found a bug in Gmail which let him reset anyone’s password”