2 votes

unencrypted user credentials accessible from the web app

No. Hopefully this is only visible to admin users, not to everybody? Still terrible, though. (If the passwords are visible to ordinary users, that's an unmitigated disaster; the app de facto has no ...
  • 40.3k
2 votes

unencrypted user credentials accessible from the web app

No detail you have mentioned is supposed to happen: being able to view all users being able to see passwords passwords in plaintext Unless there is a specific reason for these things and the risks ...
  • 124k
1 vote

What are the security risks of only using an id in the url to protect the content?

Properly done the risk of using such a unique link without additional authentication is low. Properly done means that Only authenticated users are redirected using such a link and only to resources ...

Only top scored, non community-wiki answers of a minimum length are eligible