← Stadt Wiesbaden

2016 Wiesbaden — postal voting exposed full address from name+DOB

2016 Unknown records affected Share on X

Data compromised

Addresses, names

Technical writeup

CCC found vulnerability: name + DOB returned full address and extra first names. Automatable. Used to find mayor's unknown names.

Root cause

Weak access control; IDOR

References