---
id: 1355
title: "How an Improper Access Control Vulnerability Led to Account Theft in One Click"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/how-improper-access-control-vulnerability-led-account-theft-one-click"
published_at: "2024-11-06 17:21"
tags: ["bug-bounty", "access-control", "account-takeover", "vulnerability", "hackerone", "authorization"]
phying_url: "https://phying.com/item/1355"
lang: en
---

# How an Improper Access Control Vulnerability Led to Account Theft in One Click

## Summary

Improper access control is the second most common bug bounty vulnerability, per HackerOne's report. The article explains how weak authn/authz controls enable account theft and how to remediate.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2024-11-06 17:21
- **Original:** https://www.hackerone.com/blog/how-improper-access-control-vulnerability-led-account-theft-one-click
- **Phying News:** https://phying.com/item/1355