Loading HuntDB...

information discloure via logs files at ==> https://ihelp.mtnbusiness.com/logfiles/Log_21-06-2021.txt

High
M
MTN Group
Submitted None
Reported by zero_or_1

Vulnerability Details

Technical details and impact analysis

Information Disclosure
Hi MTN team , i got a 500 error show the full path of the windows server containing the log file of today i navigate to it ==> https://ihelp.mtnbusiness.com/logfiles/Log_21-06-2021.txt i saw all logins i made with user administrator as u see the logs files is a date `Log_21-06-2021.txt` you can read every day logs via manipulate the file name :) ## Impact Ability to see login logs

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Information Disclosure