Vulnerability
vulnerability:verizon_account_number_disclosure_vulnerability
Also: Verizon website bug
A flaw in a Verizon quick-payment page that exposed a target’s account number in the page source or JavaScript.
A flaw in a Verizon quick-payment page that exposed a target’s account number in the page source or JavaScript.
“the account number’s completely there”
“you could go to this website and just get the account number of any phone number you wanted”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | Verizon | Explicit | 118 |
| incoming | EXPLOITS | Joseph Harris | Explicit | 118 |
Joseph Harris EXPLOITS Verizon account-number disclosure vulnerability
Joseph used a Verizon website flaw that disclosed account numbers to obtain the information needed to take over accounts.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I find a JavaScript variable that has the account number just completely disclosed right there”
Verizon account-number disclosure vulnerability AFFECTS Verizon
The account-number disclosure vulnerability affected Verizon’s bill-payment website.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“Joseph found a page on Verizon’s website which lets you put in someone’s phone number to pay their bill”