HexBrain

AWS VDP · Report #3017105

Sensitive API Key Leakage

Informativestatus
mediumseverity
41upvotes
4 Mar 2025disclosed

How it was found

Vulnerability: AWS Sensitive Keys Leakage

Details : the AWS Access Key & Secret Key is leaked in a Public GitHub Repository located at :

Repository located at : █████████

Steps To Reproduce:

Go to : ██████

In the middle of this file you can see the Keys

Please see the attached screenshot also.

Impact

Impact of This Vulnerability : Any attacker who got access to these key can perform the arbitrary or malicious action on behalf of the authenticated user with same privilege and as unauthorized users can potentially access AWS resources, perform actions, and incur charges.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original