Internet-based digital distribution platform Stream has been hit by a major security flaw.
According to The Next Web, a major fault has been revealed in Steam's account login process that allowed the users to reset any account knowing only the target's email address.
A hacker could abuse the 'forgotten password' feature in Steam's log-in service and requesting a password reset code then visiting the special reset page and pushing OK.
The reset page usually requests for a code that is sent to the users email address to verify their identity but it would also accept an empty code as valid.
So it was open for attack and anyone could break into a Steam account and change the password without needing access to the recovery email address.
The bug is now fixed.
Steam said that the bug affected only a small amount of accounts between July 21- 25.
The company is resetting passwords on any affected accounts.
You’ve reached your limit of {{free_limit}} free articles this month.
Subscribe now for unlimited access.
Already subscribed? Log in
Subscribe to read the full story →
Smart Quarterly
₹900
3 Months
₹300/Month
Smart Essential
₹2,700
1 Year
₹225/Month
Super Saver
₹3,900
2 Years
₹162/Month
Renews automatically, cancel anytime
Here’s what’s included in our digital subscription plans
Exclusive premium stories online
Over 30 premium stories daily, handpicked by our editors
Complimentary Access to The New York Times
News, Games, Cooking, Audio, Wirecutter & The Athletic
Business Standard Epaper
Digital replica of our daily newspaper — with options to read, save, and share
Curated Newsletters
Insights on markets, finance, politics, tech, and more delivered to your inbox
Market Analysis & Investment Insights
In-depth market analysis & insights with access to The Smart Investor
Archives
Repository of articles and publications dating back to 1997
Ad-free Reading
Uninterrupted reading experience with no advertisements
Seamless Access Across All Devices
Access Business Standard across devices — mobile, tablet, or PC, via web or app