HexBrain

Trellix · Report #2160178

default credentials at https://52.42.105.71/

Validstatus
criticalseverity
77upvotes
1 Feb 2024disclosed

How it was found

Summary:

hi team i able to login in one of your servers by default credentials

Steps to reproduce:

1.go to link : https://52.42.105.71/ 1.enter this credentials

password=admin
username=admin

PoC

{F2703747}

{F2703748}

How to remediate the vulnerability

Change the password of the user or disable the account

Impact

the website was misconfigured in a manner that may have allowed a malicious user to login with administrator for the default organization account credentials.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original