harness Gitspace hardcoded password for every user account
Researcher discloses a hardcoded password shared by every Harness Gitspace user account.
Khashayar Fereidani reported to Full Disclosure that Harness Gitspaces use a hardcoded password for every user account. Gitspaces are Harness hosted development environments: a container with the user's source tree, an SSH server, and an IDE, with ports published externally. The posting does not cite a CVE or state that exploitation has been observed.
- Hardcoded password is shared by every Gitspace user account.
- Gitspaces are hosted containers with source, SSH, and an IDE.
- Posted to Full Disclosure; no CVE or active exploitation stated.
From the original article
Posted by Khashayar Fereidani on Sep 26 # harness Gitspace hardcoded password for every user account https://fereidani. com/harness-gitspace-hardcoded-password-for-every-user-account https://fereidani. com/contact ## Description Gitspaces are Harness's hosted development environments: a container with the user's source tree, running an SSH server and an IDE, with its ports published on...
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.