The identified page allowed unauthorized access to a user's profile management functionality without requiring authentication. Sensitive user details, such as name, email address, and EDIPI, were exposed upon accessing the…Read More
U.S. Dept Of Defense: Unauthorized Access Exposing Sensitive Data
