地图 / Arbitrary File Reading on Uber SSL VPN

Arbitrary File Reading on Uber SSL VPN

信息泄露 / Plaintext Storage of a Password / #617543

厂商: Uber
严重程度: 中危 · CVSS 7.5
赏金: $6,500
弱点: Plaintext Storage of a Password
研究员: @orange
披露日期: 2021-02-25
资产: —
CVE: CVE-2019-11508 CVE-2019-11510 CVE-2019-11538 CVE-2019-11539 CVE-2019-11540 CVE-2019-11542

该报告还没有中文解读。

时间线

2019-06-17报告提交
2021-02-25公开披露

阅读 HackerOne 原文 ↗作者 @orange · 版权归作者与 Uber 所有

同类报告

Attacker can read password from log dataMidpoint (European Commission - DIGIT) · 2019-06-15 · $169 Storage of old passwords in plain text formatRecorded Future · 2022-05-12 Mail app stores cleartext password in database until OAUTH2 setup is doneNextcloud · 2023-03-08 Password of failed (2FA) login attempt is stored in logNextcloud · 2020-03-01 Local Storage Custom Node Credentials LeakMyEtherWallet · — · $250 Plain text password for 'unknown' user exist in URL when opening jira.apiok.ruok.ru · 2019-06-17