Snapchat · Report #911606
Leaked JFrog Artifactory username and password exposed on GitHub - https://snapchat.jfrog.io
Validstatus
highseverity
$15,000bounty
137upvotes
12 Aug 2021disclosed
Summary
Researcher found valid jFrog credentials which were committed to a public Github repository of a Snap employee. This allowed access to internal Snap libraries/artifacts along with the ability to push updates to existing artifacts as well.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.