Social Security Number in Hidden field

Jyotiranjan Acharya <[email protected]> Sun, 23 Nov 2014 14:12:51 -0600

Newsgroups	gmane.comp.security.web-applications
Message-ID	<CAGZfuitBPxwcWdez6T_w_96XQzRxufkipWmQf3mVXaRPhUMi5w@mail.gmail.com>

Hello,

There is an application which is present in an intranet. When, the
Admin of the application loads the user information page, a field
called SSN appears. It shows ###-##-####. But the actual SSN remains
in a hidden field.

Do you think there should be a security issue with this ?

Regards
Jyoti



This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------