地图 / SSN is exposed on slides, previous critical report was not fixed in an appropriate way

SSN is exposed on slides, previous critical report was not fixed in an appropriate way

信息泄露 / 敏感信息明文存储 / #874017

厂商: U.S. Dept Of Defense
严重程度: 高危
赏金: —
弱点: 敏感信息明文存储
研究员: @pvm
披露日期: 2020-06-11
资产: —
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（992 字符中的一小部分）

**Summary:** SSN is exposed on slides, previous critical report was not fixed in an appropriate way

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 U.S. Dept Of Defense 所有。

时间线

2020-05-14报告提交
2020-06-11公开披露

阅读 HackerOne 原文 ↗作者 @pvm · 版权归作者与 U.S. Dept Of Defense 所有

同类报告

Github Token Leaked publicly for https://github.sc-corp.netSnapchat · 2018-10-08 Public and secret api key leaked in JavaScript sourceStripo Inc · 2020-09-29 Slack token leaking in stackoverflow and devtimesShipt · — · $300 Unauthorized Account Access via Leaked Credentials in URL Format (Account Takeover )Khan Academy · 2025-05-07 internal dev tokens disclosureSnapchat · 2023-06-14 · $250 Leaked reused password for a few Khan Academy usersKhan Academy · 2025-07-12