harness Gitspace hardcoded password for every user account
Researcher discloses a hardcoded password shared by every Harness Gitspace user account.
Khashayar Fereidani reported to Full Disclosure that Harness Gitspaces use a hardcoded password for every user account. Gitspaces are Harness hosted development environments: a container with the user's source tree, an SSH server, and an IDE, with ports published externally. The posting does not cite a CVE or state that exploitation has been observed.
64