Exposed Extremely Sensitive Information in Public ZIP File

How it was found

An unprotected ZIP file (█████.zip) containing sensitive information is publicly accessible at http://██████/data/█████.zip. This file contains highly sensitive data, including SMTP credentials, database connection details, and AWS secret keys for the us-gov-west-1 region. Steps to Reproduce:

Download the ZIP file from the publicly accessible URL:
    URL: http://██████/data/████.zip
    You can download the file via the browser or using curl:

curl -O http://██████/data/███.zip

Extract the contents of the ZIP file using any standard extraction tool:

unzip ███.zip

Review the extracted files for sensitive information. The files include:

SMTP credentials (username, password, host, and port)
Database credentials (username, password, host, database name)
AWS secret keys (AWS access key, secret key, and session token)


SMTP Credentials(scripts/contact-*.php | scripts/backups/contact-*/php)

AWS S3 Key (███/scripts/i.js)

With the exposed data, an attacker could:

Access and send emails via the SMTP service.
Gain unauthorized access to AWS resources, potentially   compromising sensitive data and infrastructure.

Impact

An attacker who gains access to this publicly exposed ZIP file can obtain critical information, including:

SMTP Credentials: Allowing unauthorized email sending and potential phishing or social engineering attacks.
AWS Keys: Allowing unauthorized access to AWS services, potentially exposing sensitive data, leading to privilege escalation, or enabling further attacks on the target's infrastructure in the us-gov-west-1 region.

This exposure of sensitive data represents a CRITICAL security risk.

System Host(s)

█████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

Steps to reproduce:

Access the public ZIP file via https://████/data/█████████.zip.
Download and extract the contents.
Examine the extracted files for sensitive information like SMTP   credentials, database connection details, and AWS keys.

Suggested Mitigation/Remediation Actions

Remove Public Access: Immediately restrict access to the ZIP file, ensuring it's not publicly accessible. Store sensitive files in a secure location that requires authentication. Rotate Exposed Credentials: Revoke the exposed SMTP, database, and AWS credentials, and issue new ones. Use Encryption: Store sensitive data in encrypted files, both at rest and in transit, to ensure that unauthorized access does not expose sensitive content. Implement Access Control: Ensure that proper access controls are in place, such as authentication and authorization for any sensitive file locations. Monitor and Audit Access: Implement monitoring and logging to detect and alert on any unauthorized access attempts to sensitive data. Regularly Audit and Rotate Keys: Use a secure key management system (like AWS Secrets Manager) to store and manage sensitive keys, and regularly rotate them to mitigate the impact of potential leaks.