U.S. Dept Of Defense · Report #195544
Exposed Access Control Data Backup Files on DoD Website
Validstatus
mediumseverity
10upvotes
15 Feb 2017disclosed
Summary
A Department of Defense website was mis-configured to expose access control data backup files, and potentially the personal information of its users. Thanks for notifying us of this, @mazen160!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.