HexBrain

U.S. Dept Of Defense · Report #1300591

Sensitive information on '████████'

Validstatus
mediumseverity
26 Aug 2021disclosed

How it was found

Hi team,

i found a sensitive file hosted on '█████████'

that i think must be not public accessible due to the wording "███████"

Vulnerable Endpoint:

https://█████████/████████

██████████

Impact

Sensitive information pubblicy accessible

System Host(s)

████████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

go to https://█████/█████████

Suggested Mitigation/Remediation Actions

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original