U.S. Dept Of Defense · Report #1007702
PII Leak of USCG Designated Examiner List at https://www.███
Validstatus
mediumseverity
12upvotes
3 Dec 2020disclosed
How it was found
Hello Dod Team,
Summary: PII Leakage of approx 750 personal is being disclosed through the pdf at https://www.██████ which had been uploaded at the 7th of October, this includes Personal phone number and email address.
Description: The list presented at the "dereport.pdf" contains personal info such as phone numbers and private emails of personal in contact with the DoD.
Step-by-step Reproduction Instructions
- Navigate to https://www.████
POC
█████ ██████████ █████████
Suggested Mitigation/Remediation Actions
Provoking the public access to the specified PDF
Best Regards,
nagli.
Impact
PII Disclosure of DoD personal, this include email addresses and phone numbers.