HexBrain

Legal Robot · Report #163599

Amazon Bucket Accessible (http://legalrobot.s3.amazonaws.com/)

N/Astatus
4upvotes
26 Aug 2016disclosed

How it was found

Seeing your s3 Amazon bucket, the problem is, visiting your amazon bucket will shows the files on the bucket, while secure bucket would bring up an access denied page. I have attached Screenshots comparing your bucket with secure bucket to show you what a secure bucket looks like and where the bucket is being used in your source code.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original