U.S. Dept Of Defense · Report #874017
SSN is exposed on slides, previous critical report was not fixed in an appropriate way
How it was found
Summary: SSN is exposed on slides, previous critical report was not fixed in an appropriate way
Description:
-
SSN is exposed on a screenshot. Slide 13th. SSN is covered by an olive/green rectangle which is moveable. The image itself was not updated. ██████wp-content/uploads/2018/12/████████
-
The issue was previously submitted and was not fixed in an appropriate way. https://hackerone.com/reports/█████████
-
The file is easy to find by the file name. https://duckduckgo.com/?q=%22███%22&t=hj&ia=web
Impact
Critical ███████ is a real person (officer) according to ██████████
Step-by-step Reproduction Instructions
- Download the file ████████wp-content/uploads/2018/12/█████
- Navigate to slide 13
- Move the olive rectangle which covers SSN
Product, Version, and Configuration (If applicable)
N/A
Suggested Mitigation/Remediation Actions
Blur/remove/cover the SSN on the image and replace the image on the slides.
Impact
PII leakage. Name and SSN.