8x8 · Report #692116
Access to ██████████████ due to weak credentials
Validstatus
mediumseverity
22upvotes
8 Jan 2020disclosed
How it was found
Hi Team
Description:
During the analysis, It was found that the █████████████████████ ask's for credentials from the users to access the ██████, But the weak credentials set █████:██████ allows anyone to login.
Steps To Reproduce:
- Open █████████████████████████
- Enter
████████████████ username and password field. - You now have access to the analytical data.
POC
███
Remediation
Use strong set of password instead of common████generic ones like ████:██████
Impact
An attacker can bypass the authentication check and access the internal analytical data.
PS: apart from the analytical data, I wasn't able to find much.