U.S. Dept Of Defense · Report #1512199
username and password leaked via pptx for █████████ website
Validstatus
mediumseverity
6upvotes
7 Apr 2022disclosed
How it was found
Description:
While performing my recon, I can accross this https://███/███████ which contain username and password for accessing your asset here █████ ████
References:
███████
Impact
I tried accessing the ip but it is not working here, I f it can be accessed somewhere this will result in full account takeover via leaked credentials
System Host(s)
████
Affected Product(s) and Version(s)
CVE Numbers
Steps to Reproduce
- Go to https://██████/█████████ .
- Download the powerpoin slide.
- You will see the leaked credentials