HexBrain

Shopify · Report #158118

Access to Splunk at https://apt.ec2.shopify.com:8089

Validstatus
$500bounty
14upvotes
1 Sept 2016disclosed

Summary

Issue with old DNS record, as it turned out.

How it was found

Description:

Default Splunk admin credentials were found at https://apt.ec2.shopify.com:8089 Default credentials

login:admin
password:changeme

See pic 1 as POC

Resolution:

Change credentials

Please let me know if you need some extra information. Sorry if this report if out of scope, i thought it could be informative for you!

Thanks in advance!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original