Password Reset Hack Exposed in Honda's E-Commerce Platform, Dealers Data at Risk

Security vulnerabilities discovered in Honda's e-commerce platform could have been exploited to gain unrestricted access to sensitive dealer information.
"Broken/missing access controls made it possible to access all data on the platform, even when logged in as a test account," security researcher Eaton Zveare said in a report published last week.
The platform is designed for the sale of power

access access controls account commerce controls data eaton eaton zveare e-commerce exploited exposed hack honda information missing password password reset platform report researcher reset risk security security researcher test vulnerabilities