Dropbox bug allowed users into accounts without a password

A serious Dropbox bug allowed anyone into another users account, without a correct password for hours yesterday.

According to Techcrunch, the security vulnerability was opened after a code update at 1:54 PM PST, allowing anybody to access someone’s account with just their username credentials. The bug was later caught and fixed…



Neowin.net