Summary by nafee7hh
Summary
A publicly accessible conference attendee directory was identified that exposed participant contact information without requiring authentication.
The document contained participant names, organizational affiliations, mailing addresses, telephone numbers, fax numbers, and email addresses.
While the document may have originally been intended for conference coordination or public distribution, historical documents containing consolidated contact information can remain publicly accessible long after their original purpose. Periodic review of such documents can help ensure that legacy content does not unnecessarily expose personal or organizational contact information.
The issue was reported through the NASA Vulnerability Disclosure Program for review.