Able to download any hosted content on AWS S3 bucket(stripo)
Low
S
Stripo Inc
Submitted None
Actions:
Reported by
unchained_
Vulnerability Details
Technical details and impact analysis
An AWS s3 bucket was found, with improper access controls, where all its contents could be downloaded.
Steps to reproduce:
1. List contents of the bucket with: ``aws s3 ls s3://stripo``
2. Download the hosted data with : ``aws s3 sync s3://stripo .``
## Impact
Any hosted data can be downloaded to an attackers personal storage.
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Improper Access Control - Generic