U.S. Dept Of Defense · Report #186317
Information disclosure on a DoD website
Duplicatestatus
lowseverity
2upvotes
16 Mar 2017disclosed
Summary
A Department of Defense website was misconfigured to disclose potentially sensitive system and user information. @r0p3 was able to demonstrate this vulnerability by crafting a specially formatted URL. Thanks @r0p3!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.