Hello IMVU!, i recently found something not right in imvu email change and 2FA, so when you have 2FA on and you want to change your password a 2FA code will be sent to the current email, okay thats right, but when you want to change your email a 2FA code will go to the new email and not to the current email, this will leave 0 protection of the account, lets say a hacket logged in with your 2FA and changed your email he could change it without a code being sent to your current email, and afterwards he can change the password. bypassing the 2FA on your main email. This need to be considered, a solution for this would be when changing email a 2FA code have to be sent to the current email first, for protection in cases like that. I hope you understand and fix this, because things like this stuff can happen. Thank you
Hello IMVU!, i recently found something not right in imvu email change and 2FA, so when you have 2FA on and you want to change your password a 2FA code will be sent to the current email, okay thats right, but when you want to change your email a 2FA code will go to the new email and not to the current email, this will leave 0 protection of the account, lets say a hacket logged in with your 2FA and changed your email he could change it without a code being sent to your current email, and afterwards he can change the password. bypassing the 2FA on your main email. This need to be considered, a solution for this would be when changing email a 2FA code have to be sent to the current email first, for protection in cases like that. I hope you understand and fix this, because things like this stuff can happen. Thank you
0 Votes
0 Comments
Login to post a comment