Webafrica fixes security flaw in ticket support system

[Jamie McKane]

Webafrica fixes security flaw in ticket support system

Webafrica was recently alerted to a security flaw in its online ticket monitoring system, and it has now fixed the issue.

A MyBroadband reader reported the issue to Webafrica last week and contacted MyBroadband about the potential risk to information posed by the vulnerability.

 

[gregmcc]

The customer who contacted MyBroadband discovered that the Ticket ID field in the URL could be changed to view the support tickets filed by other customers.

Pffft...basic security fail there. Its amazing how this still gets overlooked.

 

[Trompie67]

What's the point? It's not like Webafrica respond to support tickets anyway. Whole system should be scrapped.