CUI labled and ████ and ██████ Restricted ██████ intelligence
Medium
U
U.S. Dept Of Defense
Submitted None
Actions:
Reported by
alyssa_herrera
Vulnerability Details
Technical details and impact analysis
**Description:**
A file labeled with the following
"Data is for intelligence purposes only and is not to be used for targeting. This data is classified as CUI. Controlled by: ██████████ ███████ "
## References
https://www.spa.usace.army.mil/Portals/16/docs/business/smallbusiness/2021%20BOOH/B3-Cyber_Security.pdf?ver=B-E2odYFMUwjqankJCgFCA%3D%3D
https://www.totem.tech/how-to-mark-controlled-unclassified-information-cui/
https://www.dcsa.mil/Portals/91/Documents/CTP/CUI/21-S-0587_Cleared_CUI_Quick_Reference_Guide_Dec2020.pdf
## Impact
Based on preliminary readings CUI marked files were to be treated as sensitive but unclassed information and the information with in could be used by foreign adversaries. especially if it's used for intel purposes
## System Host(s)
██████
## Affected Product(s) and Version(s)
## CVE Numbers
## Steps to Reproduce
Visit https://█████/██████████ and observe the bottom right box containing the control information
████
## Suggested Mitigation/Remediation Actions
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Information Disclosure