HexBrain

8x8 · Report #692116

Access to ██████████████ due to weak credentials

Validstatus
mediumseverity
22upvotes
8 Jan 2020disclosed

How it was found

Hi Team

Description: During the analysis, It was found that the █████████████████████ ask's for credentials from the users to access the ██████, But the weak credentials set █████:██████ allows anyone to login.

Steps To Reproduce:

  1. Open █████████████████████████
  2. Enter █████████ ███████ username and password field.
  3. You now have access to the analytical data.

POC

███

Remediation

Use strong set of password instead of common████generic ones like ████:██████

Impact

An attacker can bypass the authentication check and access the internal analytical data.

PS: apart from the analytical data, I wasn't able to find much.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original