harness Gitspace hardcoded password for every user account
Researcher discloses a hardcoded password shared by every Harness Gitspace user account.
Khashayar Fereidani reported to Full Disclosure that Harness Gitspaces use a hardcoded password for every user account. Gitspaces are Harness hosted development environments: a container with the user's source tree, an SSH server, and an IDE, with ports published externally. The posting does not cite a CVE or state that exploitation has been observed.
- Hardcoded password is shared by every Gitspace user account.
- Gitspaces are hosted containers with source, SSH, and an IDE.
- Posted to Full Disclosure; no CVE or active exploitation stated.
Posted by Khashayar Fereidani on Sep 26 # harness Gitspace hardcoded password for every user account https://fereidani.com/harness-gitspace-hardcoded-password-for-every-user-account https://fereidani.com/contact ## Description Gitspaces are Harness's hosted development environments: a container with the user's source tree, running an SSH server and an IDE, with its ports published on...
This source does not provide full text. Read it at seclists.org.