HexBrain

MTN Group · Report #789388

Accessible Restricted directory on [bcm-bcaw.mtn.cm]

Validstatus
mediumseverity
15upvotes
15 Jul 2020disclosed

How it was found

Summary:

  • There are some exposed directory/files publicly accessible for anyone, when it should be restricted on the server

Steps To Reproduce:

  • Go to http://bcm-bcaw.mtn.cm/wp-content/uploads/ and navigate between available folders

==Poc:== {F707036}

Impact

  • Every uploaded data can be accessible through this directory listing vulnerability
  • This might include several private/confidential data

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original