BreachExchange mailing list archives
Security flaw on Passport Canada's website exposes applicants' personal information
From: lyger <lyger () attrition org>
Date: Tue, 4 Dec 2007 13:29:39 +0000 (UTC)
http://680news.com/news/local/article.jsp?content=20071204_080504_1760 A security flaw at Passport Canada's website has allowed an Ontario man access to the personal information of other people applying for new passports. The Globe and Mail reported the breach was discovered last week while Jamie Laning was completing his own passport application. He found he could view the applications of others by altering one character in the Internet address displayed by the Web browser. The information he viewed included social insurance numbers, driver's licence numbers and addresses. [...] _______________________________________________ Dataloss Mailing List (dataloss () attrition org) http://attrition.org/dataloss Tenable Network Security offers data leakage and compliance monitoring solutions for large and small networks. Scan your network and monitor your traffic to find the data needing protection before it leaks out! http://www.tenablesecurity.com/products/compliance.shtml
Current thread:
- Security flaw on Passport Canada's website exposes applicants' personal information lyger (Dec 04)