HexBrain

MTN Group · Report #1297480

Default Login Credentials on https://broadbandmaps.mtn.com.gh/

Validstatus
criticalseverity
42upvotes
25 Aug 2022disclosed

How it was found

Summary:

Hello Team, I just found out that broadbandmaps.mtn.com.gh requires logging in when you visit it, but it turned out that you can actually login as an Admin and do anything on the specific site. when you visit the mentioned site you will get this
{F1405776} it will require to be logged in to perform any action, to bypass this you have to Login with the default credentials Username= admin password= admin , and for some reasons you can't login with Firefox it only works on Google chrome and chromium web browser.

Supporting Material:

-Check this Video > {F1405806}

Impact

Access admin Panel due to Default credentials

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original