Sumo Logic keep api credentials on endpoints

security bug:

go sumologic.com (big company, many customer)

make free account

log in account, make access key - help.sumologic.com/docs/manage/security/access-keys/ 
<http://help.sumologic.com/docs/manage/security/access-keys/>

download collector for windows - 
help.sumologic.com/docs/send-data/installed-collectors/collector-installation-reference/download-collector-from-static-url/
 
<http://help.sumologic.com/docs/send-data/installed-collectors/collector-installation-reference/download-collector-from-static-url/>

install collector by `cmd` using access key - help.sumologic.com/docs/send-data/installed-collectors/windows/ 
<http://help.sumologic.com/docs/send-data/installed-collectors/windows/>
ex: SumoCollector.exe -console -q "-Vsumo.accessid=<accessId>" "-Vsumo.accesskey=<accessKey>"

look c:users(you)appdatalocaltempi4j_nlog_1.log

accessid and accesskey in log file !! give access to whole api !!:
help.sumologic.com/docs/api/ <http://help.sumologic.com/docs/api/>
api.sumologic.com/docs/ <http://api.sumologic.com/docs/>

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

Source: 11/beF/3202/erusolcsidlluf/gro.stsilces