U.S. Dept Of Defense: Server side information disclosure

2016-12-20T00:41:15
ID H1:192577
Type hackerone
Reporter samhax
Modified 2017-01-06T21:09:40

Description

A misconfigured Department of Defense webserver improperly disclosed configuration information when returning an error page. sulemanmalik03 was able to demonstrate this vulnerability by crafting a particularly formatted URL. Thanks sulemanmalik03!