Eternal · Report #271407

Admin Access to a domain used for development and admin access to internal dashboards on that domain

Validstatus

31upvotes

28 Dec 2017disclosed

Summary

@prateek_0490 Was able to find our development server without any authentication. Which leads to leak the user data and some internal dashboards.

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original