SFTP/FTP Password Exposure via sftp-config.json

Edit Report

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2023090071

Below is a copy:

SFTP/FTP Password Exposure via sftp-config.json

The issue was found in the sftp-config.json file.
PoC :
type: sftp,
host: SFTP HOST,
user: SFTP USER,
password: SFTP PASS,
port: 22,

All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.