AWS VDP · Report #3017105
Sensitive API Key Leakage
Informativestatus
mediumseverity
41upvotes
4 Mar 2025disclosed
How it was found
Vulnerability: AWS Sensitive Keys Leakage
Details : the AWS Access Key & Secret Key is leaked in a Public GitHub Repository located at :
Repository located at : █████████
Steps To Reproduce:
Go to : ██████
In the middle of this file you can see the Keys
Please see the attached screenshot also.
Impact
Impact of This Vulnerability : Any attacker who got access to these key can perform the arbitrary or malicious action on behalf of the authenticated user with same privilege and as unauthorized users can potentially access AWS resources, perform actions, and incur charges.