BreachExchange mailing list archives

Security flaw on Passport Canada's website exposes applicants' personal information


From: lyger <lyger () attrition org>
Date: Tue, 4 Dec 2007 13:29:39 +0000 (UTC)


http://680news.com/news/local/article.jsp?content=20071204_080504_1760

A security flaw at Passport Canada's website has allowed an Ontario man 
access to the personal information of other people applying for new 
passports.

The Globe and Mail reported the breach was discovered last week while 
Jamie Laning was completing his own passport application. He found he 
could view the applications of others by altering one character in the 
Internet address displayed by the Web browser.

The information he viewed included social insurance numbers, driver's 
licence numbers and addresses.

[...]
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml


Current thread: