HexBrain

Informatica · Report #1081750

loing in to marketplace panel on enablement.informatica.com

Validstatus
mediumseverity
11upvotes
20 Jan 2021disclosed

Summary

Researcher identified a legacy DNS name pointing to an IP address that was no longer owned or operated by Informatica. The site hosted at the IP address was a test site that appears to have a number of vulnerabilities. We removed the legacy DNS entry.

How it was found

hello dear support

I have found the issue and you can log in in to panel with any password and username

{F1163976}

url: https://enablement.informatica.com/marketplace/

{F1163979}

Impact

Can gain access to admin panel.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original