strawberrynet
August 26, 2015
3866 days ago
Undisclosed
Confirmed
Misconfiguration
Retail
Company site allows users to put in their email address, and it returns their customer data in plain text. They consider this a usability feature of their site. Security personnel consider it irresponsible and insecure.