Tuesday, October 26, 2021
News

Chennai school student helps IRCTC fix bug on its online platform

   SocialTwist Tell-a-Friend    Print this Page   COMMENT

Chennai | Tuesday, 2021 11:45:06 PM IST
A 17-year-old plus two student in a private school in Chennai's Tambaram has helped the Indian Railway Catering and Tourism Corporation (IRCTC) fix a bug in its online ticketing platform, which could have exposed millions of passengers and their private information.

Ranganathan said that the critical Insecure Object Direct References (IODR) vulnerability on the website helped him to access the journey details of other passengers.

He told media persons that while he was logging into the IRCTC site for booking a ticket, he found that he could access the details of other passengers that could compromise the security features of the website.

The vulnerability helped him to access details of other passengers including name, gender, age, PNR number, train details, departure station, and date of journey.

Ranganathan said that as the back end code was the same, a hacker could have ordered food in the name of another passenger, changed the boarding station, and even cancelled the ticket without the knowledge of the passenger.

He said that more than this, there was the risk of the database of millions of passengers being compromised or leaked.

IRCTC officials said that Ranganathan had reported the matter to the Computer Emergency Response Team (CERT) on August 30, and the IRCTC was alerted. The problem was fixed in five days.

The teenager had earlier got acknowledgments from Linkedin, the United Nations, Nike, and several others for alerting them of the vulnerabilities in their websites.

--IANS aal/vd

( 257 Words)

2021-09-21-17:58:03 (IANS)

 
  LATEST COMMENTS ()
POST YOUR COMMENT
Comments Not Available
 
POST YOUR COMMENT
 
 
TRENDING TOPICS
 
 
CITY NEWS
MORE CITIES
 
 
INDIA WORLD ASIA
Aryan case probe official Wankhede reach...
Sarbananda Sonowal to inaugurate Incubat...
157 new medical colleges approved by PM ...
Jyotiraditya Scindia inaugurates first d...
Priyanka Gandhi to address 'Pratigya ral...
Sonia Gandhi calls on Congress to fight ...
More...    
 
 Top Stories
Lakhimpur Kheri violence: SC direct... 
First sign of trouble between Pakis... 
GIBS Business School Bangalore awar... 
Dabur withdraws controversial adver... 
Raveena Tandon receives heartfelt w... 
I feel I have a parallel love story... 
Techno FAQ reached the highest conc... 
Constantly challenge myself to grow...