Weak Password Reset Mechanism: From IDOR to Admin Access

The IDOR from Part 1 gave us something much more valuable than just another user's profile. This is part 2 of the guided pen test lab. It gave us the administrator's email address. Now the question is