Lucene search

K
hackeroneKarimrahalH1:293470
HistoryNov 28, 2017 - 3:04 p.m.

Razer US: Database credentials leak at http://drivers.razersupport.com/.bash_history

2017-11-2815:04:17
karimrahal
hackerone.com
92

The researcher discovered that the .bash_history on this server had improper permissions, which allowed public viewing of the files. When a DB admin eventually executed a command involving clear text credentials for the database, this exposed the password for that database (a Kayako DB used for support).
Razer’s summary explains the report well.