information discloure via logs files at ==> https://ihelp.mtnbusiness.com/logfiles/Log_21-06-2021.txt
High
M
MTN Group
Submitted None
Actions:
Reported by
zero_or_1
Vulnerability Details
Technical details and impact analysis
Hi MTN team ,
i got a 500 error show the full path of the windows server containing the log file of today
i navigate to it ==> https://ihelp.mtnbusiness.com/logfiles/Log_21-06-2021.txt
i saw all logins i made with user administrator
as u see the logs files is a date `Log_21-06-2021.txt`
you can read every day logs via manipulate the file name :)
## Impact
Ability to see login logs
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Information Disclosure