地图 / Github test clientID and clientSecret leaked

Github test clientID and clientSecret leaked

信息泄露 / Plaintext Storage of a Password / #796139

厂商: Kubernetes
严重程度: 低危
赏金: —
弱点: Plaintext Storage of a Password
研究员: @rira12621
披露日期: 2020-07-24
资产: https://github.com/kubernetes/test-infra
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（2047 字符中的一小部分）

Summary: A github clientID and clientSecret for an oauth app are being leaked on github

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Kubernetes 所有。

时间线

2020-02-13报告提交
2020-07-24公开披露

阅读 HackerOne 原文 ↗作者 @rira12621 · 版权归作者与 Kubernetes 所有

同类报告

Arbitrary File Reading on Uber SSL VPNUber · 2021-02-25 · $6,500 Attacker can read password from log dataMidpoint (European Commission - DIGIT) · 2019-06-15 · $169 Storage of old passwords in plain text formatRecorded Future · 2022-05-12 Mail app stores cleartext password in database until OAUTH2 setup is doneNextcloud · 2023-03-08 Password of failed (2FA) login attempt is stored in logNextcloud · 2020-03-01 Local Storage Custom Node Credentials LeakMyEtherWallet · — · $250