cloudup Subdomain Takeover That resolves to Desk.com ( CNAME cloudup.desk.com )
Medium
A
Automattic
Submitted None
Actions:
Reported by
khizer47
Vulnerability Details
Technical details and impact analysis
Hi,
While Looking On The CloudUp Website I found That One of The Subdomain of CloudUp [HELP](help.cloudup.com) was Hosted on [Desk](Desk.com) and I think tHe Desk Account of Cloudup was Expired or Canceled by any cause So I have Checked The Site for its CNAME and The CNAME was Resolving to
###CNAME http://cloudup.desk.com
So I Tried to Make an Account on [Desk](desk.com) With the same as The CNAME Cloud.desk.com And I was Successful in this Coz Of The Account of cloudup was Expired or cancelled, Now I have setup my page on the site.
But Due to some Problem The Main Domain ***help.cloudup.com (See Screenshot Below 0.png) is Showing SSL Error Maybe due to expired Certificate I'm Not sure as I'm just a Started still have to learn many things!
So Due to the Error I'm unable to Show my Message on The Main Domain But Still I have Full Control over The CNAME ( See Screenshots)
Hope This Will Be Resolved
Thanks,
Muhammad Khizer Javed
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Violation of Secure Design Principles