A vulnerability that could have potentially exposed all Gmail addresses has been addressed by Google recently, after a penetration tester disclosed the abuse methodto the company. Identifying the weak spot started with Gmails delegation feature, through which a user can allow another one full access to their account. Oren Hafif of security firm Trustwave started off by analyzing an accept and reject URL sent to the delegate in a verification email. Hafif noticed that both links …
Comments are closed.
