HexBrain

U.S. Dept Of Defense · Report #710813

Able to log in with default ██████g creds at https█████████████████████.mil

Validstatus
highseverity
4upvotes
12 Jan 2021disclosed

How it was found

Summary████ was able to use ████████████████████████ to log into this instance of Adobe Experience Manager, though it does not seem to be in used at the moment Description███████ while navigating to https█████████████████████████.mil, I performed some fuzzing and found that /repository was available which asked for authentication using ███████████████████ worked and I could then access another path found by fuzing lc link which then showed me the ██████ panel.

Impact

Medium since it is not being used

Step-by-step Reproduction Instructions

  1. Navigate to https████████████████.mil/repository
  2. use ████████████████ (username██████████password)
  3. navigate to https██████████████████████.mil/lc

Product, Version, and Configuration (If applicable)

Adobe Experience Manager

Suggested Mitigation/Remediation Actions

Remove this application if it is not being used

Impact

Medium - I was able to use █████████████ to log in

Thanks

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original