HexBrain

WakaTime · Report #246780

Using an outdated version of OpenSSH on db01.wakatime.com

Validstatus
lowseverity
11upvotes
29 Oct 2017disclosed

How it was found

Hii team once again, Hope you are better I have found that db01.wakatime.com is using an outdated version OpenSSH version leading to multiple vulnerability. How i find it I scanned the domain with nmap and it gives me a open port 222 and when i connect it with ncat it get connected and shows the whole server configuration. As shown in the screenshot . Fix it as soon as possible and if you want more information on this please let me know.

Thanks Regards Piyush kumar

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original