POJIA破甲
地图 / Hard coded Username and password in GiHub commit

Hard coded Username and password in GiHub commit

信息泄露 / 硬编码凭据 / #877402

厂商
Kubernetes
严重程度
低危
赏金
—
弱点
硬编码凭据
研究员
@njaysec
披露日期
2020-07-24
资产
https://github.com/kubernetes/kubernetes
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(1025 字符中的一小部分)
Summary: I was exploring the GitHub repository and I found some hard coded credentials in the commit history. These credentials are related to Vagrant tool which is used to setup virtual machines environment, This is a very critical disclosure and can lead to bigger damages. So I am informing this …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Kubernetes 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @njaysec · 版权归作者与 Kubernetes 所有

同类报告

JumpCloud API Key leaked via Open Github Repository.Starbucks · 2019-12-30Important information leaked on GithubEquifax-vdp · 2019-08-22Credential leak on GitHub: https://github.com/█/█/ (Peoplesoft CRM)8x8 · 2023-04-27[█████████] Hardcoded credentials in Android AppEternal · 2017-07-19 · $500Credentials leaked via GithubAcronis · 2024-08-26 · $50Exposed valid AWS, Mysql, Sendgrid and other secretsGlovo · 2022-07-08