U.S. Dept Of Defense · Report #1050196
PII Leak of ████████ Personal at https://www.█████████
Validstatus
mediumseverity
5upvotes
10 Feb 2021disclosed
How it was found
Hello DoD Team,
Summary:
PII Leakage of approx 1000 personal is being disclosed through the pdf at https://www.████████which had been uploaded at the 7th of October, this includes Personal phone number and email address.
Description:
The list presented at the "████████" contains personal info such as phone numbers and private emails of personal in contact with the DoD.
Step-by-step Reproduction Instructions
Navigating to https://www.█████
Suggested Mitigation/Remediation Actions
Provoking the public access to the specified PDF
Best Regards,
nagli.
Impact
PII Disclosure of DoD personal, this include email addresses and phone numbers.