Information disclosure (system username) in the x-amz-meta-s3cmd-attrs response header on federation.data.gov

信息泄露 / 信息泄露 / #262649

厂商

GSA Bounty

严重程度

低危

赏金

—

弱点

信息泄露

研究员

@sp1d3rs

披露日期

2017-09-16

资产

federation.data.gov

CVE

—

该报告还没有中文解读。

Description Hi. I just noticed, that you are extended the scope for the bounty program. I looked to the first resource -

https://federation.data.gov/