Rockstar Games · Report #1082774
phpinfo() on graph.rockstargames.com exposes sensitive information
Validstatus
lowseverity
20upvotes
21 Jan 2021disclosed
Summary
In this report, the researcher identified a subdomain that was improperly made public while sensitive information was disclosed, including phpinfo(). We were able to fix the deployment and remove the sensitive information, thus resolving the issue.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.