HexBrain

Reddit · Report #1716249

sensitive data exposure

N/Astatus
highseverity
5upvotes
10 Nov 2022disclosed

How it was found

Summary:

[A Password hash entry was found in /etc/passwd. This is a major vulnerability since /etc/passwd is a world-readable file by default. Once the password hash is found, an attacker may extract the password using a program like crack.]

Impact:

it is high impact vulnerability .once hacker found password hash it may be leads to develop a program like crack

Steps To Reproduce:

[https://www.reddit.com/etc%2fpasswd]

  1. [add step]
  2. [add step]
  3. [add step]

Supporting Material/References:

[list any additional material (e.g. screenshots, logs, etc.)]

  • [attachment / reference]

Impact

A Password hash entry was found in /etc/passwd. This is a major vulnerability since /etc/passwd is a world-readable file by default. Once the password hash is found, an attacker may extract the password using a program like crack.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original