eBay Discovers Security Vulnerability in Developer Accounts

[eBayNews]

eBay recently identified a means by which someone could gain access to eBay Developers Program account information, according to eBay's Kumar Kandaswamy, who posted an announcement on the program's blog. He said this type of access does not allow the capture of financial or other sensitive information, such as credit card or bank account information or Social Security numbers, and he said eBay has not detected any unusual activity with any Developer account.

eBay is requiring all developers to change their eBay Developers Program (developer.ebay.com) passwords and advised, "If you believe you or your customers have been the victim of fraudulent activity, contact us immediately at developer-relations@ebay.com."

Changing a password would not patch the system if it were a 'bug'. Changing passwords would maybe solve a problem of leaked passwords or a disgruntled employee 'getting even'.