Summary
An AWS employee pushed sensitive data to a public github bucket, including customer information and credentials.
Note: This issue is outside the scope of this database's usual criteria for inclusion,
but has been kept for historic reasons, as it was included in the original CSP Security Mistakes dataset.
Affected Services
N/A
Remediation
None required
Tracked CVEs
No tracked CVEs
References
https://www.upguard.com/breaches/identity-and-access-misstep-how-an-amazon-engineer-exposed-credentials-and-morehttps://www.theregister.com/2020/01/23/aws_engineer_credentials_github/https://github.com/SummitRoute/csp_security_mistakes/issues/17
Contributed by https://github.com/0xdabbad00
Disclosure Date
Thu, Jan 23rd, 2020
Exploitablity Period
-
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Upguard
