8x8 · Report #1771051
Directory Listing at https://█.█.█.█
Validstatus
lowseverity
18upvotes
18 Nov 2022disclosed
Summary
@shuvam321 reported to us an enabled Directory Listing at https://█.█.█.█/cobbler/ & https://█.█.█.█/cblr/. The directories exposed open source files related to the Spacewalk project. The server instance was initially installed as a preview of a Spacewalk. No sensitive information had been disclosed & we restricted access to the instance entirely, which resolved the issue.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.