Minecraft 'Impersonation' Exploit Allows Users To Access Other Accounts
Had a rough time playing Minecraft today? There's a reason why.
A security flaw in Minecraft that allowed users to sign into strangers' accounts was exposed by security researchers Alex Vanderport and Keegan Novik when the Team Avolition duo posted a detailed advisory about the snafu on GitHub Saturday. The game's maker, Mojang, has promised the flaw is fixed.
The vulnerability left all "migrated" Minecraft accounts open to a malicious attack in which another users' accounts were accessible, leaving them open to exploits such as forced losses or allowing access to a privileged account. The vulnerability extends beyond the game, to personal computers as well.