U.S. Dept Of Defense · Report #1243782
CUI labled and ████ Restricted pdf on █████
How it was found
Description: A file labeled with the following "CONTROLLED BY: ██████████ CUI ████: ███ ████████
Was discovered and based on public information ███████ CUI marking it appears it shouldn't be publicly available either. If i am wrong about the markings please correct me.
References
https://www.spa.usace.army.mil/Portals/16/docs/business/smallbusiness/2021%20BOOH/B3-Cyber_Security.pdf?ver=B-E2odYFMUwjqankJCgFCA%3D%3D https://www.totem.tech/how-to-mark-controlled-unclassified-information-cui/ https://www.dcsa.mil/Portals/91/Documents/CTP/CUI/21-S-0587_Cleared_CUI_Quick_Reference_Guide_Dec2020.pdf
Impact
Based on preliminary readings CUI marked files were to be treated as sensitive but unclassed information and the information with in could be used by foreign adversaries
System Host(s)
████
Affected Product(s) and Version(s)
CVE Numbers
Steps to Reproduce
Visit https://████████/█████ and observe the bottom right box containing the control information