地图 / Insecure Storage and Overly Permissive API Keys

Insecure Storage and Overly Permissive API Keys

密码学缺陷 / Missing Encryption of Sensitive Data / #1283575

厂商: Stripo Inc
严重程度: 低危
赏金: —
弱点: Missing Encryption of Sensitive Data
研究员: @dc61703fdbcd3f8331d3dc24078c01
披露日期: 2022-03-30
资产: stripo.email
CVE: —

该报告还没有中文解读。

时间线

2021-07-29报告提交
2022-03-30公开披露

阅读 HackerOne 原文 ↗作者 @dc61703fdbcd3f8331d3dc24078c01 · 版权归作者与 Stripo Inc 所有

同类报告

Password and mail address stored unencrypted in memory - Rockstar Game LauncherRockstar Games · 2023-10-27 · $750 curl HSTS long file name clears contentsInternet Bug Bounty · 2024-01-20 sensitive data-creds for database - private keyMars · 2024-11-19 CVE-2023-46219: HSTS long file name clears contentscurl · 2023-12-08 Unauthenticated phpinfo()files could lead to ability file read at █████████ [HtUS]U.S. Dept Of Defense · 2023-01-06 When uploading attachments, unencrypted file names are made available to the serverBitwarden · 2021-08-02