After placing an order on the MTN site, I was provided with a link as a reference to my online order application.
This link can easily be manipulated to view any other mtn client's personal information. It has no authentication and the reference ID in the url is not encrypted. I have tried to contact MTN to alert them to this security risk, however they have chosen to ignore me for a week now...
Information displayed:
Title:
Name:
Surname:
ID number:
Date of birth:
Contact number:
Email address:
Physical address:
This link can easily be manipulated to view any other mtn client's personal information. It has no authentication and the reference ID in the url is not encrypted. I have tried to contact MTN to alert them to this security risk, however they have chosen to ignore me for a week now...
Information displayed:
Title:
Name:
Surname:
ID number:
Date of birth:
Contact number:
Email address:
Physical address:
