Uber Patches Authentication Bypass Vulnerability on Custom SSO Solution

Uber patched an authentication bypass vulnerability in its homegrown SSO solution that allowed attackers to take over subdomains and steal session cookies.
Source: Threadpost