2 ms·
How so? Was it made clear that the authentication page was for the documents he subsequently downloaded?
by chengiz 13y ago
How so? Was it made clear that the authentication page was for the documents he subsequently downloaded?
- JetSpiegel 13y agoEven if it was, this is ridiculous. What kind of security let's you download documents without authentication?
- arethuza 13y agoIt's a surprisingly common bug in custom web-based systems that handle documents or images - I've found this a number of times in systems I was reviewing (and I'm not a security expert).