Page 1 of 1

Wrong vulnerability type stated

Posted: Sun May 21, 2023 9:42 am
by SamD3tta
Hi team,
Recently some of my reports got rejected
ID- 3355876, 3355860 , 3355919 , 3355920
stating that its the wrong vulnerability type but it was Improper Access Control Vulnerability i.e. access to sensitive information.
Reference report- https://www.openbugbounty.org/reports/2211638/
Its a much older report and shows that sensitive information disclosure should be reported as Improper Access Control Vulnerability.