8x8 · Report #1364022
Authentication Bypass & ApacheTomcat Misconfiguration in [██]
Validstatus
mediumseverity
18upvotes
4 Nov 2021disclosed
Summary
A single host in the pilot environment exposed the Apache Tomcat /admin and /manager endpoints.
The issue has been rectified, as access to these endpoints has been restricted.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.