Starbucks · Report #332586
Unauthorized access to jiratest.starbucks.com
Validstatus
criticalseverity
49upvotes
30 May 2018disclosed
Summary
@damian89 found an unsecured JIRA instance containing internal and sensitive information. The finding was supported with detailed reporting and impact information. We immediately blocked remote access to the site and prevented anonymous users from browsing and editing issues. Thank you @damian89 for your great research!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.