U.S. Dept Of Defense · Report #644358
PII leakage-Full SSN on ███
Validstatus
criticalseverity
14upvotes
10 Oct 2019disclosed
Summary
This was a simple Google dork search as well as checking other search engines to discover sensitive documents.
How it was found
Summary: I discovered a pdf file on ████████ that outlines various information corresponding to military members. It reveals information on date of birth, where they were born, marriage status, race, children/dependents, etc Description: I discovered what looks to be an internal file that outlines sensitive information on various service member and looks to be publicly accessible
Impact
High
Step-by-step Reproduction Instructions
Visit: https://█████/wp-content/uploads/2018/12/██████████
Product, Version, and Configuration (If applicable)
N/A
Suggested Mitigation/Remediation Actions
Remove immedietly
Impact
An attacker can gleam highly personal information on military members.