username and password leaked via pptx for █████████ website

Disclosed: 2022-04-07 20:04:23 By ibrahimatix0x01 To deptofdefense
Medium
Vulnerability Details
**Description:** While performing my recon, I can accross this https://███/███████ which contain username and password for accessing your asset here █████ ████ ## References: ███████ ## Impact I tried accessing the ip but it is not working here, I f it can be accessed somewhere this will result in full account takeover via leaked credentials ## System Host(s) ████ ## Affected Product(s) and Version(s) ## CVE Numbers ## Steps to Reproduce 1. Go to https://██████/█████████ . 2. Download the powerpoin slide. 3. You will see the leaked credentials ## Suggested Mitigation/Remediation Actions
Actions
View on HackerOne
Report Stats
  • Report ID: 1512199
  • State: Closed
  • Substate: resolved
  • Upvotes: 6
Share this report