MASKED USER INFORMATION LEAKAGE

Hey Guyes today i found a vulnerability of  user information leakage due to improper auth token implementation in application.

DESCRIPTION:

some applications  mask user informaion like mail id , phone no , adhar card, pain card or any personal information of use for  user privacy. but due to some loop holes an attacker can see masked user information.


LETS CONTINUE HOW I FOUND :- ➤

1.      Login in application

2.      Click on deals and capture that request in burpsuite

3.      Send that request in repeater tab check response

4.      Now logout account check response same response appeared.

5.   I tried to check with old auth token then also same response received

Phone number and mails are not showing in response⦽

1.      I tried to bruteforce deals id

2.      I got the username information like phone number ,mails of that user that is previously authenticated with that auth token.

So if an attacker got expired auth token then he can extract user information by that auth token

Precautions:

Auth token is implemented all over the application. Expired token should not be of used any more.

For this vulnerbility monetha gave a bounty but low 110$ , hence it have low impact: 🔻🔺