United Airlines’ website bug exposed traveler ticket data

guest · Sep 10, 2020

United Airlines’ website bug exposed traveler ticket data
September 10, 2020
https://techcrunch.com/2020/09/10/united-website-bug-tickets/

A bug in United Airlines’ website let anyone access the ticket information for travelers who requested a refund.

The airline’s website lets users check their refund status by entering their ticket number and last name. But the website wasn’t validating the last name, making it possible to access other travelers’ refund information by changing the ticket number.
IT security expert Oliver Linow, who found the bug, told TechCrunch that he could see traveler surnames, the payment type and currency used to buy the ticket, and the refund amount.

It’s not known for how long the bug was present. United did not respond to our emails with questions about whether the airline informed data protection authorities about the incident.
Click to expand...

Log in or Sign up

United Airlines’ website bug exposed traveler ticket data

guest Guest

Log in or Sign up

United Airlines’ website bug exposed traveler ticket data

guest Guest

Useful Searches