United Nations Environment Programme Exposed 100,000 Employee Records

guest · Jan 11, 2021

United Nations Environment Programme Exposed 100,000 Employee Records
January 11, 2021
https://www.securityweek.com/united-nations-environment-programme-exposed-100000-employee-records

While researching security flaws in assets within the scope of The United Nations’ vulnerability disclosure program, the Sakura Samurai researchers discovered an ilo.org subdomain that exposed .git contents.

This allowed them to take over an SQL database, as well as perform account takeover on a Survey Management Platform belonging to the International Labour Organization. However, although these are critical vulnerabilities, both resources were found to be abandoned, thus containing little data of use.

Further fuzzing, however, led the researchers to a UNEP subdomain that leaked GitHub credentials, thus enabling them to access and download “a lot of private password-protected GitHub projects.”
Click to expand...

Log in or Sign up

United Nations Environment Programme Exposed 100,000 Employee Records

guest Guest

Log in or Sign up

United Nations Environment Programme Exposed 100,000 Employee Records

guest Guest

Useful Searches