Lucene search

K
openbugbountyKun-flyOBB:1218826
HistoryJul 08, 2020 - 2:43 p.m.

bitbucket.esti.mg Improper Access Control vulnerability OBB-1218826

2020-07-0814:43:00
kun-fly
www.openbugbounty.org
5

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: bitbucket.esti.mg
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: IAC (Improper Access Control) / CWE-284
CVSSv3 Score: 6.5 [CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: kun-fly
Remediation Guide: OWASP Access Control Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 8 July, 2020 14:43 GMT
Vulnerability Verified: 10 July, 2020 08:22 GMT
Website Operator Notified: 10 July, 2020 08:22 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 10 July, 2020 08:22 GMT
Vulnerability Fixed: 10 July, 2020 08:23 GMT