ArcGIS Rest Service linked to unsecured survey data
Medium
W
WHO COVID-19 Mobile App
Submitted None
Team Summary
Official summary from WHO COVID-19 Mobile App
ArcGIS rest service url was followed, allowing discovery of unsecured survey data. Now fixed. This wasn't part of the WHO COVID-19 Mobile App but was resolved as it was reported here.
Actions:
Reported by
y1ngxi0ng
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Authentication Bypass Using an Alternate Path or Channel