{"id":427,"date":"2007-11-29T10:35:30","date_gmt":"2007-11-29T09:35:30","guid":{"rendered":"http:\/\/www.itwriting.com\/blog\/?p=427"},"modified":"2007-11-29T10:35:30","modified_gmt":"2007-11-29T09:35:30","slug":"zoho-users-logging-into-other-accounts-by-accident","status":"publish","type":"post","link":"https:\/\/www.itwriting.com\/blog\/427-zoho-users-logging-into-other-accounts-by-accident.html","title":{"rendered":"Zoho users logging into other accounts by accident"},"content":{"rendered":"

Zoho users beware. There appears to be a nasty bug whereby a user logs in with their own credentials, but finds themselves logged into another user’s account<\/a>:<\/p>\n

\n

I have the last couple of weeks experienced that I get logged on into another account that I do not know!
I can see the other account documents. Just a few minutes ago I tried to use my own logon but was logged in to the account of <…> <\/p>\n<\/blockquote>\n

says a user on the Zoho forums. <\/p>\n

Zoho says it is fixing this urgently: <\/p>\n

\n

We have analyzed the logs and found some race conditions that could happen under high load. We have a fix in, and are continuing to monitor it very closely. We have also launched a complete review of security, so that this type of issue does not recur. We are taking it very seriously and apologize profusely.<\/p>\n<\/blockquote>\n

Food for thought nonetheless. This is the kind of reason people cite for sticking with on-premise applications. I argue that data is often safer in the cloud, but this kind of incident makes you wonder.<\/p>\n

Technorati tags: zoho<\/a>, on-demand<\/a>, security<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"

Zoho users beware. There appears to be a nasty bug whereby a user logs in with their own credentials, but finds themselves logged into another user’s account: I have the last couple of weeks experienced that I get logged on into another account that I do not know! I can see the other account documents. … Continue reading Zoho users logging into other accounts by accident<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[44,75],"tags":[],"class_list":["post-427","post","type-post","status-publish","format-standard","hentry","category-internet","category-security"],"_links":{"self":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts\/427","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/comments?post=427"}],"version-history":[{"count":0,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts\/427\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/media?parent=427"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/categories?post=427"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/tags?post=427"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}