IRCTC pauses insurers' services
The vulnerability was discovered by researchers Avinash Jain and Aseem Shrey. According to Jain, the vulnerability called IDOR (insecure direct object reference) allowed anyone to extract passenger information for insurance payout.
Mumbai|New Delhi: Indian Railway Catering and Tourism Corporation (IRCTC) has temporarily taken down the services of Bajaj Allianz and Liberty General Insurance from its platform after a vulnerability on the insurers' websites put personal data of passengers at risk.
The vulnerability was discovered by researchers Avinash Jain and Aseem Shrey. According to Jain, the vulnerability called IDOR (insecure direct object reference) allowed anyone to extract passenger information for insurance payout.
The vulnerability was discovered by researchers Avinash Jain and Aseem Shrey. According to Jain, the vulnerability called IDOR (insecure direct object reference) allowed anyone to extract passenger information for insurance payout.
Start a SIP with as low as ₹500 with ET Money App!
Download
The Economic Times News App for Quarterly Results, Latest News in ITR, Business, Share Market, Live Sensex News & More.
The Economic Times News App for Quarterly Results, Latest News in ITR, Business, Share Market, Live Sensex News & More.
ADVERTISEMENT
