An environment (.env) file with database credentials was left open by the French high-tech industrial organization Exail.
Database login information was present in the exposed.env file of Exail.
Using the credentials, attackers might have accessed the company's data if the database had been accessible to the general public. It was closed to the public in this instance though.
Denial of service (DoS) attacks against the unprotected web server might also be launched by the attackers using OS-specific flaws, overwhelming it with a barrage of requests and causing it to stop functioning.
"id": "EXA225423923",
"linkid": "exail",
"type": "Breach",
"date": "09/2023",
"severity": "25",
"impact": "2",
"explanation": "Attack limited on finance or reputation"