CVE-2021-32077

Primary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous internet user to discover Social Security Number (SSN) values via a…

published May 6, 2021

CVSS
—
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

Primary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous internet user to discover Social Security Number (SSN) values via a brute-force attack on a (sometimes hidden) search field, because the last four SSN digits are part of the supported combination of search selectors. This discloses doctors' and nurses' social security numbers and PII.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01220 · 68.5th percentile
Published
2021-05-06T23:00Z
EPSS history
Timeline
  • 06 MAY 23:00Z
    Primary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous internet user to discover Social Security Number (SSN) values via a…
    cvelistv5