Skip to content

Bug bounty reports15,219

Publicly disclosed HackerOne reports, with the platform's own outcome and severity.

Program:IBM
Status
Severity
Weakness
Year
Bounty paid0
Access stated:No account
Access needed
  • No account2
  • A user account0
  • A privileged role0
  • Admin0
  • Physical or local access0
  • Not clear from the report0
Technique
Clear filters2 of 15,219 reports
Disclosed bug bounty reports
ReportStatusWeaknessSeverityDisclosedBountyVotes
IBM Aspera HTTP Gateway stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user.Analysed#3340797ValidInformation DisclosureHigh2026-04-27–46
Unauthenticated Remote Access to Testing EndpointAnalysed#2192984ValidAccess ControlCritical2023-12-04–67

Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report (3,187 analysed so far), which can be wrong. Data as of 2026-11-15.