HexBrain

U.S. Dept Of Defense · Report #1512199

username and password leaked via pptx for █████████ website

Validstatus
mediumseverity
6upvotes
7 Apr 2022disclosed

How it was found

Description:

While performing my recon, I can accross this https://███/███████ which contain username and password for accessing your asset here █████ ████

References:

███████

Impact

I tried accessing the ip but it is not working here, I f it can be accessed somewhere this will result in full account takeover via leaked credentials

System Host(s)

████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

  1. Go to https://██████/█████████ .
  2. Download the powerpoin slide.
  3. You will see the leaked credentials

Suggested Mitigation/Remediation Actions

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original