SSN is exposed on slides, previous critical report was not fixed in an appropriate way

Disclosed: 2020-06-11 18:19:46 By pvm To deptofdefense
Critical
Vulnerability Details
**Summary:** SSN is exposed on slides, previous critical report was not fixed in an appropriate way **Description:** 1. SSN is exposed on a screenshot. Slide 13th. SSN is covered by an olive/green rectangle which is moveable. The image itself was not updated. ██████wp-content/uploads/2018/12/████████ 2. The issue was previously submitted and was not fixed in an appropriate way. https://hackerone.com/reports/█████████ 3. The file is easy to find by the file name. https://duckduckgo.com/?q=%22███%22&t=hj&ia=web ## Impact Critical ███████ is a real person (officer) according to ██████████ ## Step-by-step Reproduction Instructions 1. Download the file ████████wp-content/uploads/2018/12/█████ 2. Navigate to slide 13 3. Move the olive rectangle which covers SSN ## Product, Version, and Configuration (If applicable) N/A ## Suggested Mitigation/Remediation Actions Blur/remove/cover the SSN on the image and replace the image on the slides. ## Impact PII leakage. Name and SSN.
Actions
View on HackerOne
Report Stats
  • Report ID: 874017
  • State: Closed
  • Substate: resolved
  • Upvotes: 9
Share this report