Able to download any hosted content on AWS S3 bucket(stripo)

How it was found

An AWS s3 bucket was found, with improper access controls, where all its contents could be downloaded.

Steps to reproduce:

1. List contents of the bucket with: aws s3 ls s3://stripo
2. Download the hosted data with : aws s3 sync s3://stripo .

Impact

Any hosted data can be downloaded to an attackers personal storage.