Microsoft’s docs.com leaks sensitive files to everyone

Microsoft's docs.com service has been used by many users to store private documents. But privat documents are not private, because everybody can search and view such documents.


Advertising

According to Microsoft, docs.com is a Microsoft online platform where you can publish and discover Word, Excel, PowerPoint, OneNote, Sway, and PDF documents, among others. With Docs.com, you can create an online portfolio of your expertise, discover, download, or bookmark works from other authors, and build your brand with built-in SEO, analytics, and email and social sharing. Docs.com comes with several privacy settings where users can choose to share content to only within your organization, or publicly to the world wide web.

The site betanews.com reported here, that the common search function of docs.com are made private documents public to everyone. betanews.com also wrote, that Microsoft has pulled this search feature during last weekend. But that isn't true. I don't have a docs.com account. I visited docs.com and searched for several keywords like cv, invoice, billing and so on. I was able to view several private documents, that wasn't uploaded to docs.com in an intention to offer it to everyone.


Cookies helps to fund this blog: Cookie settings
Advertising


This entry was posted in issue and tagged , , . Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *