8x8 · Report #1368690
Hardcoded AWS credentials in ███████.msi
Validstatus
criticalseverity
7upvotes
29 Apr 2022disclosed
Summary
A hardcoded AWS access token was discovered within an MSI file available for download on the 8x8 site. The researcher was able to demonstrate access to 8x8 AWS infrastructure. The token was promptly restricted.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.