Vulnerability
vulnerability:63red_api_vulnerability
Also: 63red database exposure
Unauthenticated 63red API and exposed database credentials that enabled reading and writing database records.
Unauthenticated 63red API and exposed database credentials that enabled reading and writing database records.
“I managed to find a big vulnerability in their API.”
“the API keys which gave him full read/write access to this entire database”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | 63red | Explicit | 49 |
| outgoing | DISCOVERED_BY | Elliot Alderson | Explicit | 49 |
63red API vulnerability AFFECTS 63red
The 63red API vulnerability allowed unauthenticated users to modify accounts and otherwise control database contents.
Explicit Confidence 99% · Elliot Alderson EP 49 Details
“There was no authentication process so everybody has the ability to modify, to do whatever they want.”
63red API vulnerability DISCOVERED_BY Elliot Alderson
Elliot says he quickly found a major vulnerability in the 63red API.
Explicit Confidence 99% · Elliot Alderson EP 49 Details
“Very quickly I managed to find a big vulnerability in their API.”