地图 / Access to SQL server of ubergreen.pt through password disclosure from different domain on same IP

Access to SQL server of ubergreen.pt through password disclosure from different domain on same IP

信息泄露 / Password in Configuration File / #439223

厂商: Uber
严重程度: 低危
赏金: $750
弱点: Password in Configuration File
研究员: @healdb
披露日期: 2021-03-15
资产: —
CVE: —

该报告还没有中文解读。

时间线

2018-11-12报告提交
2021-03-15公开披露

阅读 HackerOne 原文 ↗作者 @healdb · 版权归作者与 Uber 所有

同类报告

MySQL username and password leaked in developer.valvesoftware.com via source code dislosureValve · 2018-05-07 Insecure Zendesk SSO implementation by generating JWT client-sideTrint Ltd · 2019-09-08 credentials found in config file on githubBlockFi · 2021-04-28 MySQL username and password leaked on [2017.russianaicup.ru]Mail.ru · — · $150 Git repo on https://██████.mil/ discloses API passwordU.S. Dept Of Defense · 2021-03-24 A password in plain text in conf fileSifchain · 2021-05-07