Kubernetes · Report #775123
Sensitive Information disclosure Through Config File
Duplicatestatus
1upvotes
24 Jul 2020disclosed
Summary
The hacker notified us that https://prow.k8s.io/config contains sensitive information, but we believe that none of the information contained in the file is sensitive.
How it was found
Report Submission Form
Summary:
hello Team
while Exploring Your Site.I found Config File Is leaked In Your Site Where Contains Sensitive Information,Credentials ETc
Vulnerable URL:- https://prow.k8s.io/config
Impact
Attacker Is Able To Gain sensitive Information About target and Also might Get Credentials