2
votes
unencrypted user credentials accessible from the web app
No. Hopefully this is only visible to admin users, not to everybody? Still terrible, though. (If the passwords are visible to ordinary users, that's an unmitigated disaster; the app de facto has no ...
- 40.3k
2
votes
unencrypted user credentials accessible from the web app
No detail you have mentioned is supposed to happen:
being able to view all users
being able to see passwords
passwords in plaintext
Unless there is a specific reason for these things and the risks ...
- 124k
1
vote
What are the security risks of only using an id in the url to protect the content?
Properly done the risk of using such a unique link without additional authentication is low.
Properly done means that
Only authenticated users are redirected using such a link and only to resources ...
- 184k
Only top scored, non community-wiki answers of a minimum length are eligible