8x8 · Report #412772
Hardcoded credentials in Android App
Validstatus
highseverity
17upvotes
22 Jun 2020disclosed
Summary
The mobile applications contained a URL that included credentials to a third party bug capture API. Access was restricted to pushing bug information.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.