Legal Robot · Report #194142
Legal Robot AWS S3 Bucket Directory Listing
Validstatus
mediumseverity
14upvotes
11 Oct 2017disclosed
Summary
A security researcher found an AWS S3 bucket serving public resources (intentionally). The files in this bucket were static assets like logos and marketing assets. We later removed this bucket altogether and therefore re-opened and marked this report as Resolved.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.