Executive Summary

This vulnerability involves the exposure of sensitive data without adequate protection. Specifically, an API exposes email and phone number data from the 'email' and 'telefon' fields. Additionally, the local database contains accessible sensitive information, including data on minors and municipal users. An unauthenticated remote attacker could exploit this vulnerability to gain access to this sensitive information.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability involves the exposure of sensitive personal data such as email addresses, phone numbers, and information about minors and municipal users without adequate protection.

Such exposure of sensitive data could lead to non-compliance with common data protection standards and regulations like GDPR and HIPAA, which require the protection of personal and sensitive information from unauthorized access.

Failure to protect this data adequately may result in violations of these regulations, potentially leading to legal penalties, loss of trust, and other compliance-related consequences.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is significant because it allows an unauthenticated remote attacker to access sensitive personal information such as emails, phone numbers, and data related to minors and municipal users. This exposure can lead to privacy violations, identity theft, targeted attacks, and potential misuse of the exposed data.

Useful 0 Not Useful 0