Summary by green_hats
GoAccess logs were publicly accessible on the server, allowing anyone to view the IP addresses, origin country and endpoints of users. It also provided detailed server metric breakdowns.
Unauthorised Access to GoAccess Logs on https://mwsci.jpl.nasa.gov
Disclosed by green_hats- Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
- Disclosed date 3 months ago
- Priority P4 Bugcrowd's VRT priority rating
- Status Resolved This vulnerability has been accepted and fixed