CVE-2021-32077

State: Published
Severity: Not scored
Published: May 6, 2021
Updated: Aug 3, 2024
Reserved: May 6, 2021

Description

Primary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous internet user to discover Social Security Number (SSN) values via a brute-force attack on a (sometimes hidden) search field, because the last four SSN digits are part of the supported combination of search selectors. This discloses doctors' and nurses' social security numbers and PII.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://www.veritystream.com/legacy/msow-solutions
https://www.marbasec.com/blog/cve-2021-32077-fun-with-social-security-numbers

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.