information discloure via logs files at ==> https://ihelp.mtnbusiness.com/logfiles/Log_21-06-2021.txt

How it was found

Hi MTN team ,

i got a 500 error show the full path of the windows server containing the log file of today i navigate to it ==> https://ihelp.mtnbusiness.com/logfiles/Log_21-06-2021.txt i saw all logins i made with user administrator

as u see the logs files is a date Log_21-06-2021.txt you can read every day logs via manipulate the file name :)

Impact

Ability to see login logs