GMX session manipulation vulnerability AFFECTS GMX
The session-manipulation vulnerability affected GMX’s account-reset process.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“This was a pretty serious vulnerability on GMX”
Vulnerability
vulnerability:gmx_session_manipulation_vulnerability
Also: GMX vulnerability
A GMX password-reset weakness in which an active session from another account could cause the reset flow to treat the requester as authenticated.
A GMX password-reset weakness in which an active session from another account could cause the reset flow to treat the requester as authenticated.
“Essentially, it’s session manipulation.”
“it just lets you reset the password”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | GMX | Explicit | 118 |
| incoming | EXPLOITS | Joseph Harris | Explicit | 118 |
GMX session manipulation vulnerability AFFECTS GMX
The session-manipulation vulnerability affected GMX’s account-reset process.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“This was a pretty serious vulnerability on GMX”
Joseph Harris EXPLOITS GMX session manipulation vulnerability
Joseph used the GMX session-manipulation vulnerability to take over GMX accounts.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“he’d use this vulnerability, get into that person’s e-mail account”