Earlier this week, bugs were discovered planted in Google’s platform by a security researcher which led him to gain access to the company’s sensitive internal systems indicating vulnerability in the system.
According to a report in Motherboard on Wednesday, Alex Birsan found vulnerabilities inside the Google Issue Tracker – used internally to track bugs and feature requests during product development. An issue tracking system is a computer software package that manages and maintains lists of issues, as needed by an organization.
[xyz-ihs snippet=”Alex-Birsan”]
The largest one of these vulnerabilities was one that allowed the researcher to gain access to the internal platform but the internet giant has quickly patched the bug found by Birsan and there’s no evidence anyone else found the bugs and exploited them, the re So users really shouldn’t bother asking themselves those questions, Google is patched and safe and ready to deliver.
“Exploiting this bug gives you access to every vulnerability report anyone sends to Google until they catch on to the fact that you’re spying on them,” Birsan told Motherboard. “They are all patched now and he received rewards of $3,133.7, $5,000, and $7,500 for reporting them to Google,” the report said.
Issue Tracker is available outside of Google for use by external public and partner users who need to collaborate with Google teams on specific projects. The platform has access control permissions that govern which users can find, view, create and modify issues for each project.
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
