MTN Group · Report #801437
Exposed .bash_history at http://21days2017.mtncameroon.net/.bash_history
Validstatus
mediumseverity
8upvotes
20 Mar 2022disclosed
How it was found
Summary:
Dear Security Team,
I found some dangerous urls on your servers that reveal important informations about the servers configuration themself and that are very interesting from a hacker point of view.
Steps To Reproduce:
http://21days2017.mtncameroon.net/.bash_history
Remediation
- disable that kind of function on production server
- protect them with strong credentials
- use ip restriction
Best regards, Vishu10x00 ❤️
Impact
While this does not represent a real security issue, this reveal important informations about your system and could be used by a malicious user for a future attack.