“That two-factor code can be bypassed, making the second layer of security protection effectively useless,” security researcher Karan Saini was quoted as saying upon the newly found bug.
The security bug works by exploiting a weakness in how the app authenticates a user when they log in to the platform, thereby letting the user log in to an account and easily defeat the two-factor prompt, without entering the correct code.
Also read: Former ISRO Chairman AS Kiran Kumar Wins ‘Special Achievement Award’ at Geospatial World Forum 2018
Uber reportedly said the security bug “is not a particularly severe” issue. “This isn’t a particularly severe report and is likely expected behaviour,” Rob Fletcher, Security Engineering Manager at Uber, said in his correspondence with Saini about the bug report.
Uber began testing two-factor authentication on its systems in 2015 but the company has yet to widely push the security feature to its users.
Watch: 10.or D Review | A Worthy Budget Smartphone Challenger?