Subdomain takeover on happymondays.starbucks.com due to non-used AWS S3 DNS record

访问控制 / 权限提升 / #186766

厂商

Starbucks

严重程度

中危

赏金

—

弱点

权限提升

研究员

@dpgribkov

披露日期

2016-12-19

资产

Other assets

CVE

—

该报告还没有中文解读。

I discovered that happymondays.starbucks.com DNS CNAME record is pointing to S3 AWS bucket which doesn't exist. Here's the screenshot of vulnerable domain: {F138556}