AWS uploaded sensitive data to public GitHub bucket
Published Thu, Jan 23rd, 2020
Platforms
Summary
An AWS employee pushed sensitive data to a public github bucket, including customer information and credentials. Note: This issue is outside the scope of this database's usual criteria for inclusion, but has been kept for historic reasons, as it was included in the original CSP Security Mistakes dataset.
Affected Services
N/A
Remediation
None required
Tracked CVEs
No tracked CVEs
References
https://www.upguard.com/breaches/identity-and-access-misstep-how-an-amazon-engineer-exposed-credentials-and-morehttps://www.theregister.com/2020/01/23/aws_engineer_credentials_github/https://github.com/SummitRoute/csp_security_mistakes/issues/17
Contributed by https://github.com/0xdabbad00
Entry Status
Finalized
Disclosure Date
Thu, Jan 23rd, 2020
Exploitability Period
-
Known ITW Exploitation
-
Detection Methods
None
Piercing Index Rating
-
Discovered by
Upguard
