Google Webmaster Tools Security Bug Re-Opens Access To Old Accounts

0d865 google webmaster tools logo Google Webmaster Tools Security Bug Re Opens Access To Old AccountsA security bug in Google Webmaster Tools has given users access to old accounts and websites that they’re no longer supposed to be able to access.

The problem was discovered Tuesday and reported on several SEO blogs and news outlets — including (first, I believe) by Dave Naylor — and was discussed pretty heavily by search marketers on Twitter. We asked Google late Tuesday afternoon to comment on the bug reports, but have not received a reply.

What’s happening in some, not all, Webmaster Tools accounts is that users are finding themselves with sudden access to accounts that they once had access to, but no longer do; i.e., former clients, employers and the like. That bug is presumably giving a lot of power to individuals that shouldn’t have it — power to deindex, disavow links, unverify the current/legitimate webmaster’s access, and even redirect sites to other verified domains in the user’s account. It also reveals a lot of link, search, index/crawl and other data to users that shouldn’t be able to see those things.

The bug isn’t affecting my Webmaster Tools account, so here’s a screenshot from Dave Naylor’s account showing several verification changes that re-opened access to old accounts/websites.

2d813 google wmt bug Google Webmaster Tools Security Bug Re Opens Access To Old Accounts

There are reports that the same (or a similar) bug is affecting Google Analytics, and State of Search reported that some blocked connections in Google Talk have also been unblocked.

This is a serious problem and Google’s silence on it so far suggests that they’re still trying to sort out what’s happening and why — and how to fix it.

Postscript: Google has fixed the issue this morning, several hours after the breach. Here is the statement they sent us:

For several hours yesterday a small set of Webmaster Tools accounts were incorrectly re-verified for people who previously had access. We’ve reverted these accounts and are investigating ways to prevent this issue from recurring.

Google also tells us that, despite reports from users, Google Analytics was not impacted.

Related Topics: Google: Webmaster Central | Top News

04de0 MattMcGee sm Google Webmaster Tools Security Bug Re Opens Access To Old Accounts

About The Author: is Search Engine Land’s Executive News Editor, responsible for overseeing our daily news coverage. His news career includes time spent in TV, radio, and print journalism. His web career continues to include a small number of SEO and social media consulting clients, as well as regular speaking engagements at marketing events around the U.S. He blogs at Small Business Search Marketing and can be found on Twitter at @MattMcGee and/or on Google Plus.

Connect with the author via:

| Twitter
| Google+
| LinkedIn

04de0 smx 120 Google Webmaster Tools Security Bug Re Opens Access To Old Accounts

Article source:

Categorized: Webmaster

Leave a Reply

Your email address will not be published. Required fields are marked *



You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>