[FD] Sumo Logic keep api credentials on endpoints

[dammitjosie--- via Fulldisclosure <fulldisclosure@xxxxxxxxxxxx>]

security bug:

go sumologic.com (big company, many customer)

make free account

log in account, make access key - 
help.sumologic.com/docs/manage/security/access-keys/ 
<http://help.sumologic.com/docs/manage/security/access-keys/>

download collector for windows - 
help.sumologic.com/docs/send-data/installed-collectors/collector-installation-reference/download-collector-from-static-url/
 
<http://help.sumologic.com/docs/send-data/installed-collectors/collector-installation-reference/download-collector-from-static-url/>

install collector by `cmd` using access key - 
help.sumologic.com/docs/send-data/installed-collectors/windows/ 
<http://help.sumologic.com/docs/send-data/installed-collectors/windows/>
ex: SumoCollector.exe -console -q "-Vsumo.accessid=<accessId>" 
"-Vsumo.accesskey=<accessKey>"

look c:\users\(you)\appdata\local\temp\i4j_nlog_1.log

accessid and accesskey in log file !! give access to whole api !!:
help.sumologic.com/docs/api/ <http://help.sumologic.com/docs/api/>
api.sumologic.com/docs/ <http://api.sumologic.com/docs/>

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/