U.S. Dept Of Defense · Report #1244403
CUI labled and ████ and ██████ Restricted ██████ intelligence
How it was found
Description: A file labeled with the following "Data is for intelligence purposes only and is not to be used for targeting. This data is classified as CUI. Controlled by: ██████████ ███████ "
References
https://www.spa.usace.army.mil/Portals/16/docs/business/smallbusiness/2021%20BOOH/B3-Cyber_Security.pdf?ver=B-E2odYFMUwjqankJCgFCA%3D%3D https://www.totem.tech/how-to-mark-controlled-unclassified-information-cui/ https://www.dcsa.mil/Portals/91/Documents/CTP/CUI/21-S-0587_Cleared_CUI_Quick_Reference_Guide_Dec2020.pdf
Impact
Based on preliminary readings CUI marked files were to be treated as sensitive but unclassed information and the information with in could be used by foreign adversaries. especially if it's used for intel purposes
System Host(s)
██████
Affected Product(s) and Version(s)
CVE Numbers
Steps to Reproduce
Visit https://█████/██████████ and observe the bottom right box containing the control information
████