Summary

Acunetix 360 identified a Social Security Number disclosure.

Impact

Social Security Numbers have been used in identity theft by attackers, since many organizations including businesses, government agencies, medical facilities and educational institutions have been using the Social Security Number as the primary identifier for their record keeping systems.

Remediation

We strongly advise you not to expose Social Security Numbers via your website.

Severity

Low

Classification

PCI v3.2-6.5.3 CAPEC-118 CWE-213 ISO27001-A.18.1.3 WASC-13 OWASP 2013-A6 OWASP 2017-A3