Re: Social Security Number in Hidden field
Robin Wood <[email protected]> Sun, 23 Nov 2014 22:28:50 +0000
| Newsgroups | gmane.comp.security.web-applications |
|---|---|
| Message-ID | <CALmccy4nzXMZtjipN+OkdYyEEMr-N+HHb1H58KDwe09Yku95VQ@mail.gmail.com> |
Is there any reason for the SSN being included in the page? Is it used, i.e. can it be edited on the page? If not it shouldn't be there by the sound of it. Robin On 23 November 2014 at 20:12, Jyotiranjan Acharya <[email protected]> wrote: > Hello, > > There is an application which is present in an intranet. When, the > Admin of the application loads the user information page, a field > called SSN appears. It shows ###-##-####. But the actual SSN remains > in a hidden field. > > Do you think there should be a security issue with this ? > > Regards > Jyoti > > > > This list is sponsored by Cenzic > -------------------------------------- > Let Us Hack You. Before Hackers Do! > It's Finally Here - The Cenzic Website HealthCheck. FREE. > Request Yours Now! > http://www.cenzic.com/2009HClaunch_Securityfocus > -------------------------------------- > This list is sponsored by Cenzic -------------------------------------- Let Us Hack You. Before Hackers Do! It's Finally Here - The Cenzic Website HealthCheck. FREE. Request Yours Now! http://www.cenzic.com/2009HClaunch_Securityfocus --------------------------------------