Shopify · Report #111643
Full access to Amazon S3 bucket containing AWS CloudTrail logs
Validstatus
5upvotes
1 Feb 2016disclosed
Summary
An Amazon S3 bucket used internally by Shopify was misconfigured, allowing external users to read, write and list objects. The excess permissions have been removed.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.