Summary by National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
The open S3 bucket has been deleted/removed.
Amazon S3 Bucket Misconfiguration
Disclosed by jeel003- Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
- Disclosed date about 1 year ago
- Priority P5 Bugcrowd's VRT priority rating
- Status Informational This vulnerability is seen as an accepted business risk
Summary by jeel003
Amazon s3 bucket misconfiguration: Open S3 bucket
An open S3 bucket (http://descanso.jpl.nasa.gov.s3.amazonaws.com/) has been found, granting public access to various files, including HTML, PDF, images, and other file types. The unrestricted access means that anyone with the URL can view or download the files stored within the bucket. Although no personally identifiable information (PII) is present, the exposure of these files can still have security, privacy, and business implications.