CUI Labelled document out in the open

How it was found

Hi DoD VDP,

I have found a document and each page of it is marked CUI : "Controlled Unclassified Information". According to your standards, this file shouldn't be publicly available on internet.

This document was last edited on █████████ 2021. My investigation leads me to think it could have been public since around █████████.

This presentation contains information that could be sensitive : -███████ -██████

The file can be found here : https://█████

Thank you and best wishes for 2022!

References

https://www.dodcui.mil/Portals/109/Documents/Desktop%20Aid%20Docs/CUI%20Training%20Aids_Oct%2023%202020.pdf

Impact

Information that should be controlled is now publicly accessible.

System Host(s)

██████████

Affected Product(s) and Version(s)

https://███████

CVE Numbers

Steps to Reproduce

1. Visit : https://███
2. Download the file.
3. Open the file.
4. Notice each page is labelled as "CUI" (bottom of each page).
5. See that document contains sensitive information.

Suggested Mitigation/Remediation Actions

-Remove the document from public internet.