Private key disclosed
Summary: PortSwigger Research describes a Burp Scanner finding, issue 0x00600550, in which a valid private key is disclosed within a web application. The text states that disclosure of valid private keys may lead to unauthorized access to any systems that use them for authentication, and advises verifying whether disclosed keys are actually valid and whether their disclosure in the application is appropriate.
What you should know: A private key exposed in an application is a credential to every system that trusts it, so the exposure extends well beyond the page where it was found.
Read the original at PortSwigger Research ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026