Using the /partnercdkeys/assignkeys/ endpoint on partner.steamgames.com with specific parameters, an authenticated user could download previously generated CD keys for a game which they would not normally have access. Audit logs were not bypassed using this method, and an investigation of those audit logs did not show any prior or ongoing exploitation of this bug.
Getting all the CD keys of any game
Valve gives $20k as reward for man who found exploit that generated infinite Steam keys
Announcement
Collapse
No announcement yet.
Valve gives $20,000 as reward for man who found exploit
Collapse