vodacom.co.za security?

[BBSA]

I just connected to vodacom.co.za and I was already login to somebodies else account even before I tried to login.

Shame the lady only had R5.67 left on her account.

Scary stuff

:wtf:

 

[BBSA]

I just change her birth year from 1988 to 1970

 

[Joker]

Yup, clicking around and I've been to about 6 other peoples accounts, not a single one mine :|

 

[phiber]

How?

 

[koeksGHT]

Thats not very good, transfers people airtime haha ok no don't

 

[BBSA]

How?

It was on a corporate network, so I suspect her session information was cached on the proxy server.

 

[jannievanzyl]

I escalated this earlier after BBSA's first post. Guys busy looking into this.