Admin panel of https://www.stellar.org/wp-admin/
Medium
S
Stellar.org
Submitted None
Actions:
Reported by
hach3ro
Vulnerability Details
Technical details and impact analysis
https://www.stellar.org/wp-admin/ link has various operations which should not be accessible to an anonymous user.
As admin panel is accessible an attacker can use this information in targeted attack and he can bruteforce the username and password.
on the other side server information is easily available with version and operating system details.
## Impact
https://www.stellar.org/wp-admin/
Report Details
Additional information and metadata
State
Closed
Substate
Not-Applicable
Submitted
Weakness
Violation of Secure Design Principles