Reddit · Report #1716249
sensitive data exposure
How it was found
Summary:
[A Password hash entry was found in /etc/passwd. This is a major vulnerability since /etc/passwd is a world-readable file by default. Once the password hash is found, an attacker may extract the password using a program like crack.]
Impact:
it is high impact vulnerability .once hacker found password hash it may be leads to develop a program like crack
Steps To Reproduce:
[https://www.reddit.com/etc%2fpasswd]
- [add step]
- [add step]
- [add step]
Supporting Material/References:
[list any additional material (e.g. screenshots, logs, etc.)]
- [attachment / reference]
Impact
A Password hash entry was found in /etc/passwd. This is a major vulnerability since /etc/passwd is a world-readable file by default. Once the password hash is found, an attacker may extract the password using a program like crack.