• Creation
  • Validation
  • Communication & fix
  • Disclosure

BMWGroup / Elasticsearch logging cluster exposed

Deleted user reported 2021-10-14

Summary

Various information ( delivery_quantity_2021) have been found in the logs.

It's over 25.9GB of data.

Reproduce data leak

$ estk --url=http://20.82.39.170:9200 list
delivery_quantity_2021-07-28_07-04-11 (56363354 docs)
delivery_quantity-1 (0 docs)
sandbox_demand_quantity_z621fh4bacpcsj1jdeqv (0 docs)
... skipping stats index
demanded_part_v9 (4609631 docs)
demand_quantity_2021-07-27_13-03-23 (111058865 docs)
... skipping stats index
oee_data_v1 (80423 docs)
... skpping stats index
finished_goods_quantity_v1 (0 docs)


$ estk --url=http://20.82.39.170:9200 dump -i oee_data_v1|head -4|jq -c ._source
{"accuracy":"Week","cfId":"cflNIHoB_Yy5cp3CrUuy","created":1624883233546,"creator":8905,"cycleTime":null,"date":"2021-03-12","edited":1624883233546,"editor":8905,"normalized":true,"oee":0,"okParts":0,"runtime":0,"supName":"DIE-TECH INDUSTRIES, INC.","supNo":"0021110610","targetOEE":null,"type":"PRODUCTION"}
{"accuracy":"Week","cfId":"XHaG0HUBNBmHi9ssZfG8","created":1605524716008,"creator":10685,"cycleTime":5,"date":"2020-11-22","edited":1605524716008,"editor":10685,"normalized":true,"oee":0,"okParts":0,"runtime":411,"supName":"META SYSTEM S.P.A.","supNo":"0063945210","targetOEE":0,"type":"PRODUCTION"}
{"accuracy":"Week","cfId":"N2ochXkBHy3q5BGystL5","created":1621437229395,"creator":11292,"cycleTime":15.2,"date":"2021-08-21","edited":1621437229395,"editor":11292,"normalized":true,"oee":0,"okParts":0,"runtime":0,"supName":null,"supNo":null,"targetOEE":null,"type":"PRODUCTION"}
{"accuracy":"Week","cfId":"KanzzHIBKz4d6cQr62Nu","created":1601493993413,"creator":10186,"cycleTime":null,"date":"2020-01-30","edited":1601493993413,"editor":10186,"normalized":true,"oee":0,"okParts":0,"runtime":0,"supName":"INALFA ROOF SYSTEMS, INC.","supNo":"0015889510","targetOEE":75,"type":"PRODUCTION"}



$ estk --url=http://20.82.39.170:9200 dump -i demanded_part_v9|head -4|jq 
{"_id":"1a4307a13fc5b4f2658faf3ccda042e8","_index":"demanded_part_v9","_score":null,"_source":{"beKoStBZW":null,"commodityNameEnglish":"Production Facil","commodityNameGerman":"Anlagentechnik A","commodityNumber":"9041","constructionGroups":[],"dacapoMultiSourced":false,"deleted":false,"deliverySupplierName":"MA POLSKA S.A.PLANT IN KIELCE","deliverySupplierNumber":"0013283910","derivateFactor":null,"derivateId":null,"developmentSeries":[],"forecastStatus":"EMPTY","interiorCodes":[],"labStatus":"EMPTY","materialNoBuyers":[{"address":"<redacted>@bmw.de","buyerName":"<redacted> <redacted>","materialNumber":"7334021","qnumber":"Q119376"}],"migrated":false,"multiSourcedPlants":[],"options":[],"paints":[],"partNameEnglish":"ZB LI REP.ABSCH. S.W. HI/EINSTIEG GRUND.","partNameGerman":"ZB LI REP.ABSCH. S.W. HI/EINSTIEG GRUND.","partNumber":"7334021","pepBZW":null,"plants":[{"active":true,"enginePlants":null,"labelGerman":"BMW AG CDC Dingolfing","refId":"A190"}],"poSupplierName":"MA POLSKA S.A.PLANT IN KIELCE","poSupplierNumber":"0013283910","posvar":null,"predecessorStatus":"INITIAL","productionSupplierName":"MA POLSKA S.A.PLANT IN KIELCE","productionSupplierNumber":"0013283910","purchasingGroup":"E23","purchasingOrganization":"MG-31","relevant":true,"selectedSupplierName":"MA POLSKA S.A.PLANT IN KIELCE","selectedSupplierNumber":"0013283910","supplyStrategy":"n.d.","trustedSuppliers":null},"_type":"demanded_part_mapping","sort":[1795]}



$ estk --url=http://20.82.39.170:9200 dump -i demanded_part_v9 |jq -r '._source.materialNoBuyers[0].address'|head -100
<redacted>@bmw.de
<redacted>@bmw.de
<redacted>@bmw.de
<redacted>@bmw.de
<redacted>@bmw.de
<redacted>@bmw.de
<redacted>@bmw.de
<redacted>@bmwgroup.com
<redacted>@bmw.de

There's an Hackerone report linked to this report : https://hackerone.com/reports/1471490

This report is time-senstivie but has been open for 2 weeks on hackerone. This precise configuration (port 9200, open elasticsearch) is indexed by ransomware gang.

IP:
20.82.39.170
Port:
9200
Detected protocol:
elasticsearch
Vulnerable URL:
http://20.82.39.170:9200
Indices: 31, document count: 217992571, size: 25.9 GB
Found index capacity_family_version_snapshot_v1 with 0 documents (1.3 kB)
Found index tmp_demand_quantity_hnnc43obqacqcrdrll3t_13389346 with 0 documents (1.3 kB)
Found index delivery_quantity_2021-07-28_07-04-11 with 56363354 documents (8.5 GB)
Found index subcomponent_quantity_temporary_template with 0 documents (1.3 kB)
Found index capacity_family_v1 with 0 documents (1.3 kB)
Found index delivery_quantity-1 with 0 documents (1.3 kB)
Found index demand_quantity_2021-09-04_00-30-00 with 0 documents (1.3 kB)
Found index demand_quantity_skd_ckd_import_2021-08-21_00-30-00 with 0 documents (1.3 kB)
Found index demand_quantity_skd_ckd_import_2021-08-28_00-30-00 with 0 documents (1.3 kB)
Found index fluctuation_alerting with 1 documents (5.3 kB)
Found index demand_quantity_2021-08-30_06-58-14 with 0 documents (1.3 kB)
Found index tmp_demand_quantity_dfks43obyu70lyy0h3rw_22627614 with 0 documents (1.3 kB)
Found index wire_quantity_version_snapshot_v1 with 0 documents (1.3 kB)
Found index demand_quantity-1 with 0 documents (1.3 kB)
Found index index_snapshot_v1 with 0 documents (1.3 kB)
Found index subcomponent_quantity_v2 with 0 documents (1.3 kB)
Found index demand_quantity_skd_ckd_import_2021-09-04_00-30-00 with 0 documents (1.3 kB)
Found index demand_quantity_2021-08-21_00-30-00 with 0 documents (1.3 kB)
Found index demanded_part_v9 with 4406857 documents (528.8 MB)
Found index demand_quantity_2021-07-27_13-03-23 with 111058865 documents (11.4 GB)
Found index wire_quantity_v1 with 2484 documents (367.9 kB)
Found index iff_quantity-1 with 0 documents (1.3 kB)
Found index capacity_family_v8 with 3464545 documents (394.8 MB)
Found index demand_quantity_skd_ckd_import_2021-08-30_06-58-13 with 0 documents (1.3 kB)
Found index car_quantity_v1 with 0 documents (1.3 kB)
Found index capacity_family_data_v1 with 765259 documents (84.9 MB)
Found index oee_data_v1 with 80423 documents (11.7 MB)
Found index good_receipt_quantity_v1 with 41850000 documents (5.0 GB)
Found index demand_quantity_2021-08-28_00-30-00 with 0 documents (1.3 kB)
Found index kpi_statistics_log_v1 with 783 documents (318.4 kB)
Found index finished_goods_quantity_v1 with 0 documents (1.3 kB)
Found by ElasticSearchExplorePlugin 2021-10-13
IP:
20.82.39.170
Port:
9200
Detected protocol:
elasticsearch
Vulnerable URL:
http://20.82.39.170:9200
Indices: 106, document count: 435993652, size: 51.9 GB
Found index delivery_quantity_2021-07-28_07-04-11 with 56363354 documents (8.5 GB)
Found index delivery_quantity-1 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_z621fh4bacpcsj1jdeqv with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_1xxni34bykxc-0npn8a2 with 1828 documents (223.1 kB)
Found index iff_quantity_2022-01-31_00-00-00 with 0 documents (1.3 kB)
Found index demand_quantity_skd_ckd_import_2021-08-21_00-30-00 with 0 documents (1.3 kB)
Found index demand_quantity_skd_ckd_import_2021-08-28_00-30-00 with 0 documents (1.3 kB)
Found index fluctuation_alerting with 1 documents (5.3 kB)
Found index tmp_demand_quantity_nmksbh0brd6czyib3dq4_22627614 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_1k0gi34bacpcsj1jo-qo with 1497 documents (181.7 kB)
Found index sandbox_demand_quantity_2pl0lx4bs3g8kb1d2trb with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_0q3hgx4bacpcsj1jt-o4 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_0k22fh4bacpcsj1js-o- with 1838 documents (224.1 kB)
Found index sandbox_delivery_quantity_0k22fh4bacpcsj1js-o- with 289 documents (85.8 kB)
Found index sandbox_demand_quantity_1q1djh4bacpcsj1jxop- with 2792 documents (327.9 kB)
Found index wire_quantity_version_snapshot_v1 with 0 documents (1.3 kB)
Found index demand_quantity-1 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_2a09n34bacpcsj1j3orl with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_dbhhlx4b7c6bogylz6kl with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_egvejh4brc2lhhrbialq with 993 documents (197.9 kB)
Found index sandbox_demand_quantity_egvejh4brc2lhhrbialq with 2792 documents (327.9 kB)
Found index sandbox_delivery_quantity_2a09n34bacpcsj1j3orl with 750 documents (143.2 kB)
Found index demand_quantity_skd_ckd_import_2021-09-04_00-30-00 with 0 documents (1.3 kB)
Found index demanded_part_v9 with 4671642 documents (567.5 MB)
Found index demand_quantity_2021-07-27_13-03-23 with 111058865 documents (11.4 GB)
Found index iff_quantity-1 with 0 documents (1.3 kB)
Found index capacity_family_v8 with 3187841 documents (375.3 MB)
Found index demand_quantity_skd_ckd_import_2022-02-19_02-30-00 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_equzjh4brc2lhhrboakx with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_2flmrn4bs3g8kb1dhdpz with 745 documents (142.2 kB)
Found index iff_quantity_2022-01-17_00-00-00 with 0 documents (1.3 kB)
Found index iff_quantity_2022-02-14_11-28-14 with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_2pl0lx4bs3g8kb1d2trb with 758 documents (144.2 kB)
Found index sandbox_demand_quantity_drjl034b7c6bogylikmn with 7656 documents (827.2 kB)
Found index capacity_family_data_v1 with 746902 documents (91.3 MB)
Found index sandbox_demand_quantity_263d034bacpcsj1jqupk with 1458 documents (179.4 kB)
Found index sandbox_demand_quantity_1_n7lh4bs3g8kb1do9rd with 1820 documents (222.3 kB)
Found index sandbox_delivery_quantity_063jgx4bacpcsj1jt-q5 with 0 documents (1.3 kB)
Found index demand_quantity_skd_ckd_import_2022-02-14_12-08-42 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_063jgx4bacpcsj1jt-q5 with 1503 documents (182.2 kB)
Found index capacity_family_version_snapshot_v1 with 0 documents (1.3 kB)
Found index subcomponent_quantity_temporary_template with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_z621fh4bacpcsj1jdeqv with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_2q1jrn4bacpcsj1j9-rf with 745 documents (142.2 kB)
Found index sandbox_delivery_quantity_2k09n34bacpcsj1jbepi with 750 documents (143.2 kB)
Found index sandbox_delivery_quantity_1q1djh4bacpcsj1jxop- with 993 documents (187.3 kB)
Found index iff_quantity_2022-01-24_00-00-00 with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_0q3hgx4bacpcsj1jt-o4 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_3k3g034bacpcsj1jlopa with 1458 documents (179.4 kB)
Found index sandbox_delivery_quantity_1xxni34bykxc-0npn8a2 with 288 documents (85.7 kB)
Found index sandbox_demand_quantity_1639kx4bacpcsj1ju-pn with 1824 documents (222.7 kB)
Found index index_snapshot_v1 with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_1639kx4bacpcsj1ju-pn with 287 documents (85.6 kB)
Found index sandbox_delivery_quantity_dbhhlx4b7c6bogylz6kl with 758 documents (144.2 kB)
Found index subcomponent_quantity_v2 with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_1_n7lh4bs3g8kb1do9rd with 286 documents (85.5 kB)
Found index sandbox_demand_quantity_1a1ljh4bacpcsj1jpuph with 960 documents (136.3 kB)
Found index iff_quantity_2022-02-07_00-00-00 with 0 documents (1.3 kB)
Found index wire_quantity_v1 with 2484 documents (367.9 kB)
Found index sandbox_delivery_quantity_equzjh4brc2lhhrboakx with 766 documents (145.1 kB)
Found index sandbox_demand_quantity_2q1jrn4bacpcsj1j9-rf with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_drjl034b7c6bogylikmn with 1793 documents (274.2 kB)
Found index sandbox_delivery_quantity_3k3g034bacpcsj1jlopa with 0 documents (1.3 kB)
Found index demand_quantity_skd_ckd_import_2021-08-30_06-58-13 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_2flmrn4bs3g8kb1dhdpz with 0 documents (1.3 kB)
Found index car_quantity_v1 with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_1a1ljh4bacpcsj1jpuph with 153 documents (65.6 kB)
Found index oee_data_v1 with 80423 documents (11.7 MB)
Found index sandbox_demand_quantity_2k09n34bacpcsj1jbepi with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_1k0gi34bacpcsj1jo-qo with 0 documents (1.3 kB)
Found index delivery_quantiity with 0 documents (1.3 kB)
Found index good_receipt_quantity_v1 with 41850000 documents (5.0 GB)
Found index sandbox_delivery_quantity_263d034bacpcsj1jqupk with 0 documents (1.3 kB)
Found index kpi_statistics_log_v1 with 1789 documents (410.6 kB)
Found index finished_goods_quantity_v1 with 0 documents (1.3 kB)
Found by ElasticSearchExplorePlugin 2022-02-19
IP:
20.82.39.170
Port:
9200
Detected protocol:
elasticsearch
Vulnerable URL:
http://20.82.39.170:9200
Indices: 107, document count: 435991803, size: 51.9 GB
Found index delivery_quantity_2021-07-28_07-04-11 with 56363354 documents (8.5 GB)
Found index delivery_quantity-1 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_z621fh4bacpcsj1jdeqv with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_1xxni34bykxc-0npn8a2 with 1828 documents (223.1 kB)
Found index iff_quantity_2022-01-31_00-00-00 with 0 documents (1.3 kB)
Found index demand_quantity_skd_ckd_import_2021-08-21_00-30-00 with 0 documents (1.3 kB)
Found index demand_quantity_skd_ckd_import_2021-08-28_00-30-00 with 0 documents (1.3 kB)
Found index fluctuation_alerting with 1 documents (5.3 kB)
Found index tmp_demand_quantity_nmksbh0brd6czyib3dq4_22627614 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_1k0gi34bacpcsj1jo-qo with 1497 documents (181.7 kB)
Found index sandbox_demand_quantity_2pl0lx4bs3g8kb1d2trb with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_0q3hgx4bacpcsj1jt-o4 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_0k22fh4bacpcsj1js-o- with 1838 documents (224.1 kB)
Found index sandbox_delivery_quantity_0k22fh4bacpcsj1js-o- with 289 documents (85.8 kB)
Found index sandbox_demand_quantity_1q1djh4bacpcsj1jxop- with 2792 documents (327.9 kB)
Found index wire_quantity_version_snapshot_v1 with 0 documents (1.3 kB)
Found index demand_quantity-1 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_2a09n34bacpcsj1j3orl with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_dbhhlx4b7c6bogylz6kl with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_egvejh4brc2lhhrbialq with 993 documents (197.9 kB)
Found index sandbox_demand_quantity_egvejh4brc2lhhrbialq with 2792 documents (327.9 kB)
Found index sandbox_delivery_quantity_2a09n34bacpcsj1j3orl with 750 documents (143.2 kB)
Found index demand_quantity_skd_ckd_import_2021-09-04_00-30-00 with 0 documents (1.3 kB)
Found index demanded_part_v9 with 4671642 documents (567.2 MB)
Found index demand_quantity_2021-07-27_13-03-23 with 111058865 documents (11.4 GB)
Found index iff_quantity-1 with 0 documents (1.3 kB)
Found index capacity_family_v8 with 3186024 documents (368.7 MB)
Found index demand_quantity_skd_ckd_import_2022-02-19_02-30-00 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_equzjh4brc2lhhrboakx with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_2flmrn4bs3g8kb1dhdpz with 745 documents (142.2 kB)
Found index iff_quantity_2022-01-17_00-00-00 with 0 documents (1.3 kB)
Found index iff_quantity_2022-02-14_11-28-14 with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_2pl0lx4bs3g8kb1d2trb with 758 documents (144.2 kB)
Found index sandbox_demand_quantity_drjl034b7c6bogylikmn with 7656 documents (827.2 kB)
Found index capacity_family_data_v1 with 746699 documents (90.5 MB)
Found index sandbox_demand_quantity_263d034bacpcsj1jqupk with 1458 documents (179.4 kB)
Found index sandbox_demand_quantity_1_n7lh4bs3g8kb1do9rd with 1820 documents (222.3 kB)
Found index sandbox_delivery_quantity_063jgx4bacpcsj1jt-q5 with 0 documents (1.3 kB)
Found index demand_quantity_skd_ckd_import_2022-02-14_12-08-42 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_063jgx4bacpcsj1jt-q5 with 1503 documents (182.2 kB)
Found index capacity_family_version_snapshot_v1 with 0 documents (1.3 kB)
Found index subcomponent_quantity_temporary_template with 0 documents (1.3 kB)
Found index iff_quantity_2022-02-21_00-00-00 with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_z621fh4bacpcsj1jdeqv with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_2q1jrn4bacpcsj1j9-rf with 745 documents (142.2 kB)
Found index sandbox_delivery_quantity_2k09n34bacpcsj1jbepi with 750 documents (143.2 kB)
Found index sandbox_delivery_quantity_1q1djh4bacpcsj1jxop- with 993 documents (187.3 kB)
Found index iff_quantity_2022-01-24_00-00-00 with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_0q3hgx4bacpcsj1jt-o4 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_3k3g034bacpcsj1jlopa with 1458 documents (179.4 kB)
Found index sandbox_delivery_quantity_1xxni34bykxc-0npn8a2 with 288 documents (85.7 kB)
Found index sandbox_demand_quantity_1639kx4bacpcsj1ju-pn with 1824 documents (222.7 kB)
Found index index_snapshot_v1 with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_1639kx4bacpcsj1ju-pn with 287 documents (85.6 kB)
Found index sandbox_delivery_quantity_dbhhlx4b7c6bogylz6kl with 758 documents (144.2 kB)
Found index subcomponent_quantity_v2 with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_1_n7lh4bs3g8kb1do9rd with 286 documents (85.5 kB)
Found index sandbox_demand_quantity_1a1ljh4bacpcsj1jpuph with 960 documents (136.3 kB)
Found index iff_quantity_2022-02-07_00-00-00 with 0 documents (1.3 kB)
Found index wire_quantity_v1 with 2484 documents (367.9 kB)
Found index sandbox_delivery_quantity_equzjh4brc2lhhrboakx with 766 documents (145.1 kB)
Found index sandbox_demand_quantity_2q1jrn4bacpcsj1j9-rf with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_drjl034b7c6bogylikmn with 1793 documents (274.2 kB)
Found index sandbox_delivery_quantity_3k3g034bacpcsj1jlopa with 0 documents (1.3 kB)
Found index demand_quantity_skd_ckd_import_2021-08-30_06-58-13 with 0 documents (1.3 kB)
Found index sandbox_demand_quantity_2flmrn4bs3g8kb1dhdpz with 0 documents (1.3 kB)
Found index car_quantity_v1 with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_1a1ljh4bacpcsj1jpuph with 153 documents (65.6 kB)
Found index oee_data_v1 with 80423 documents (11.7 MB)
Found index sandbox_demand_quantity_2k09n34bacpcsj1jbepi with 0 documents (1.3 kB)
Found index sandbox_delivery_quantity_1k0gi34bacpcsj1jo-qo with 0 documents (1.3 kB)
Found index delivery_quantiity with 0 documents (1.3 kB)
Found index good_receipt_quantity_v1 with 41850000 documents (5.0 GB)
Found index sandbox_delivery_quantity_263d034bacpcsj1jqupk with 0 documents (1.3 kB)
Found index kpi_statistics_log_v1 with 1960 documents (456.8 kB)
Found index finished_goods_quantity_v1 with 0 documents (1.3 kB)
Found by ElasticSearchExplorePlugin 2022-02-21
Report created by deleted-user  2021-10-14
BloodyShell commented 2022-02-04: approved shows in report

Hey Zythop,

After analysis, as discussed on discord this belongs to BMWgroup.

I recommend you open a report at https://hackerone.com/bmwgroup with the details we discussed so you can get a bounty for this one.

Report comment dispatched to zythop by system 2022-02-04
Report edited by BloodyShell  2022-02-04
Report edited by BloodyShell  2022-02-04
New PDF report generated by system 2022-02-04
Report edited by BloodyShell  2022-02-04
Report approved by BloodyShell  2022-02-04
New PDF report generated by system 2022-02-04
Report edited by BloodyShell  2022-02-19
New PDF report generated by system 2022-02-19
Report dispatched to ...@... by system 2022-02-19
BloodyShell commented 2022-02-21: approved shows in report

Adding microsoft's network admins because we can't get through

New PDF report generated by system 2022-02-21
Report comment dispatched to zythop by system 2022-02-21
Report comment dispatched to hackerone@leakix.net by system 2022-02-21
Report comment dispatched to kundenbetreuung@bmw.de by system 2022-02-21
Report edited by BloodyShell  2022-02-21
New PDF report generated by system 2022-02-21
Report dispatched to ...@... by system 2022-02-21
Report dispatched to ...@... by system 2022-02-21
Report dispatched to ...@... by system 2022-02-21
Report dispatched to ...@... by system 2022-02-21
Report edited by BloodyShell  2022-02-23
New PDF report generated by system 2022-02-23
Report dispatched to ...@... by system 2022-02-23
Report edited by BloodyShell  2022-03-08
New PDF report generated by system 2022-03-08
Report marked as fixed by BloodyShell  2022-03-08
Report edited by BloodyShell  2022-03-08
New PDF report generated by system 2022-03-08
Report closed by BloodyShell  2022-03-08
New PDF report generated by system 2022-03-08
Information
Owner BMWGroup
Created 2021-10-14 07:22
Updated 2022-04-30 07:30
Fixed true

Contacts
h...@leakix.net
k...@bmw.de
v...@microsoft.com
i...@microsoft.com
a...@microsoft.com
I...@microsoft.com
c...@bmw.de

Status
Status closed
Hosting contacted false
CERT contacted false

Download report