HexBrain

Equifax-vdp · Report #649322

Important information leaked on Github

Validstatus
highseverity
98upvotes
22 Aug 2019disclosed

How it was found

While searchin on Github about Equifax i found some juicy information like a username and password of this subdomain (https://transport5.ec.equifax.com/), internal ip of the database and its username & password In the following link (https://github.com/ajiththorali/Testing/blob/49025b364451fb2076f85ad009a0dc50a941c5ce/target/classes/API_Equifax/propertiesHandle.properties) you could find this info


XML_URL = https://transport5.ec.equifax.com/ists/stspost?require_security= HTTP/1.1 Username = 50404 Password = ny5b2MuswjrFq3J2P9 service_name = acroxmltest Content_Type = application/xml


jdbc_driver = com.mysql.jdbc.Driver db_url = jdbc:mysql://192.168.84.225:3700/EquiFax db_username = root db_password = redhat


You should change passwords of the leaked account and remove this info from github

Impact

any attacker can login to this sub domain and do unauthorized actions If any one was able to be inside the network he would connect to the leaked database ip and steal important information

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original