Visit Freshworks.com Visit Freshworks

Replies posted by andy.wenzel

1 Reply

M
Contributor
mfrischmanContributor
posted in Archives - Freshdesk

Security Flaw: Forgot Password Mechanism Can Circumvent Verification

I'll point out that this process has become much more complicated now that Freshdesk has enabled multiple email addresses per account. Before you could unverify an account by changing the (only) email address a contact had to be one that had never been used before. You could then re-send the activation email to the user. That process no longer works as of a couple of weeks ago. We need a way to better lock-down access so that a user can not verify themselves and have agents be able to send password resets to the customers.  

25
K
Contributor
7 years ago

Badge winners

Show all badges
Terms of UseCookie settings