U.S. Dept Of Defense · Report #710813
Able to log in with default ██████g creds at https█████████████████████.mil
How it was found
Summary████
was able to use ████████████████████████ to log into this instance of Adobe Experience Manager, though it does not seem to be in used at the moment
Description███████
while navigating to https█████████████████████████.mil, I performed some fuzzing and found that /repository was available which asked for authentication using ███████████████████ worked and I could then access another path found by fuzing lc link which then showed me the ██████ panel.
Impact
Medium since it is not being used
Step-by-step Reproduction Instructions
- Navigate to https████████████████.mil/repository
- use ████████████████ (username██████████password)
- navigate to https██████████████████████.mil/lc
Product, Version, and Configuration (If applicable)
Adobe Experience Manager
Suggested Mitigation/Remediation Actions
Remove this application if it is not being used
Impact
Medium - I was able to use █████████████ to log in
Thanks