HexBrain

MTN Group · Report #801437

Exposed .bash_history at http://21days2017.mtncameroon.net/.bash_history

Validstatus
mediumseverity
8upvotes
20 Mar 2022disclosed

How it was found

Summary:

Dear Security Team,

I found some dangerous urls on your servers that reveal important informations about the servers configuration themself and that are very interesting from a hacker point of view.

Steps To Reproduce:

http://21days2017.mtncameroon.net/.bash_history

Remediation

  • disable that kind of function on production server
  • protect them with strong credentials
  • use ip restriction

Best regards, Vishu10x00 ❤️

Impact

While this does not represent a real security issue, this reveal important informations about your system and could be used by a malicious user for a future attack.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original