Shopify · Report #165048
Access to Splunk via shard3-db2.ec2.shopify.com endpoint
Validstatus
12upvotes
19 Sept 2016disclosed
Summary
Some services (including Splunk and SMTP) on a staging system (shard3-db2.ec2.shopify.com) were unintentionally exposed to the internet due to misconfigured firewall rules. The staging system was obsolete and has been shut down.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.