HexBrain

Ruby · Report #257276

Open aws s3 bucket s3://rubyci

N/Astatus
criticalseverity
1upvotes
6 Aug 2017disclosed

How it was found

Hello team,

Description:

Ruby amazon aws bucket https://rubyci.s3.amazonaws.com is open with read only privilege which allows any authenticated aws user to read private files. PFA screenshot.

Thanks, Sandeep

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original