POJIA破甲
地图 / Exposed Unencrypted Telnet Endpoint

Exposed Unencrypted Telnet Endpoint

密码学缺陷 / Unlabeled / #194454

厂商
Starbucks
严重程度
低危
赏金
—
弱点
Unlabeled
研究员
@zephrfish
披露日期
2017-02-08
资产
Other assets
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(683 字符中的一小部分)
I'm not sure where to submit this as I know it is a low/medium risk issue on an asset which is out of scope. Essentially I stumbled across the endpoint whilst looking at other Starbucks domains within scope, the affected host is: `franchisee.starbucks.com:23` it was found to be running an instance …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Starbucks 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @zephrfish · 版权归作者与 Starbucks 所有

同类报告

WannaCrypt “Killswitch”HackerOne · 2017-05-13[Java] CWE-326: Query to detect weak encryption with an insufficient key sizeGitHub Security Lab · — · $4,500sign_multisig crashes monero-wallet-rpc on a malformed but decryptable multisig txsetMonero · 2026-09-17Use of Cryptographically Weak Pseudo-Random Number Generator in WebCrypto keygenInternet Bug Bounty · 2023-04-09 · $4,000Android app does not clear end to end encryption keysNextcloud · 2021-06-16 · $100End to end encryption public key is not properly verified on Desktop and AndroidNextcloud · 2021-09-23 · $1,500