8x8 · Report #1486670
subdomain takeover (abandoned Zendesk █.easycontactnow.com)
Validstatus
mediumseverity
9upvotes
28 Apr 2022disclosed
Summary
@bx_1 reported to us an issue with a CNAME record which pointed to a subdomain outside of 8x8's control - to an abandoned Zendesk instance. We've deleted the DNS record and rectified the issue.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.