Sensitive information disclosure [HtUS]
Program: U.S. Dept Of Defense
Bug Type: Information Disclosure
Bounty: Unspecified
Date: 2022-07-09
information-disclosure
sensitive-data-leak
Summary
The researcher found an exposed server health/status endpoint in an asset out-of-scope in the DoD policy, but the report was nonetheless triaged and resolved.