Jopie Fourie
Expert Member
- Joined
- Aug 30, 2019
- Messages
- 2,251
Discovery Bank
says it has fixed a security flaw in its systems that allowed credit card transactions without the correct CVV number.
On Monday morning Business Insider South Africa was able to make two credit card payments on two different e-commerce platforms with the incorrect CVV number, simply using a sequences such as "000".
In one instance, Discovery Bank also didn’t require further authorisation in the form of a one-time pin.
Discovery Bank closed a gaping credit card security hole on Monday – but says it suffered no fraud | Businessinsider
We found the flaw in Discovery Bank's system still working on Monday morning.