8x8 · Report #1957430
Credential leak on GitHub: https://github.com/█/█/ (Peoplesoft CRM)
Validstatus
lowseverity
47upvotes
27 Apr 2023disclosed
Summary
@pentestor informed us of credentials that were uploaded to GitHub. Upon investigation, our team confirmed that the credentials in question no longer exist and are associated with a database that is no longer in use. Furthermore, we have submitted a takedown request to GitHub, and the repository has since been removed.
How it was found
Description: hey , i found a credential leak on github https://github.com/████████/███████/blob/22dc688289fac99f█████/testsql.sh
Steps To Reproduce:
(Add details for how we can reproduce the issue)
- open https://github.com/██████████/█████████/blob/22dc688289fac99f████/testsql.sh
- you can see username and password
Supporting Material/References:
████
Impact
with this information disclosure we can access to Peoplesoft CRM database