HexBrain

U.S. Dept Of Defense · Report #707228

Internal IP Address Disclosed

Validstatus
mediumseverity
5upvotes
14 May 2020disclosed

How it was found

Target Url https://███████/███████/static/pubsite/js/main-header-dropdown.js?ver=0.87

Summary Hello, I found an internal IP address disclosure in the page.

Description: Extracted ip address: ████████ extracted port: ██████ place where I found it: var logoutUrl = 'https://██████:███/█████/logout'

Step-by-step Reproduction Instructions

  1. Navigate to the target url and search for the ip and you will find it. █████████

Suggested Mitigation/Remediation Actions

Avoid disclosing private ip addresses in public codes.

Impact

Honestly there is no direct impact; however, I found that I should tell you about it in ██████e you don't know about this issue because this information can help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities.

Best Regards

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original