---
id: 4201
title: "Greyhound Critical Vulnerabilities - Road Rewards Program"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/greyhound-road-rewards-program-advisory"
published_at: "2019-04-11T00:00:00Z"
tags: ["authentication-bypass", "api-security", "responsible-disclosure", "greyhound", "pii-exposure"]
phying_url: "https://phying.com/item/4201"
lang: en
---

# Greyhound Critical Vulnerabilities - Road Rewards Program

## Summary

Critical Greyhound API flaws from insufficient authentication exposed Road Rewards members' PII and enabled takeover of over a million accounts; the vendor left them unfixed.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2019-04-11T00:00:00Z
- **Original:** https://bishopfox.com/blog/greyhound-road-rewards-program-advisory
- **Phying News:** https://phying.com/item/4201