Data center: Ashburn, VA

Telegram Chat : MBHH_x86

Email Us:

Mobile Hacker For Hire, hire a hacker, hiring a hacker, hacker with proof

Sumo Logic keep api credentials on endpoints

Table of Contents

From: dammitjosie— via Fulldisclosure <fulldisclosure () seclists org>
Date: Sat, 18 Feb 2023 02:42:46 +0100 (CET)

security bug:

go (big company, many customer)

make free account

log in account, make access key - 

download collector for windows -

install collector by `cmd` using access key - 
ex: SumoCollector.exe -console -q "-Vsumo.accessid=<accessId>" "-Vsumo.accesskey=<accessKey>"

look c:\users\(you)\appdata\local\temp\i4j_nlog_1.log

accessid and accesskey in log file !! give access to whole api !!: <> <>

Sent through the Full Disclosure mailing list
Web Archives & RSS:

Current thread:

  • Sumo Logic keep api credentials on endpoints dammitjosie— via Fulldisclosure (Feb 22)

Leave a Reply

Your email address will not be published. Required fields are marked *

error: Content is protected !!