Webafrica was recently alerted to a security flaw in its online ticket monitoring system, and it has now fixed the issue.<\/p>\n
A MyBroadband reader reported the issue to Webafrica last week and contacted MyBroadband about the potential risk to information posed by the vulnerability.<\/p>\n
This issue was exclusive to Webafrica’s customer zone, where customers of the ISP can monitor the progress of their support tickets and report any issues with their connection.<\/p>\n
When accessing Webafrica’s ticket support system and viewing support tickets, customers are directed to the following URL:<\/p>\n
https:\/\/www.webafrica.co.za\/viewticket.php?tid=*TicketID*<\/p><\/blockquote>\n
In this URL, *TicketID* refers to a unique series of characters pointing to the customer’s specific ticket number.<\/p>\n
The customer who contacted MyBroadband discovered that the Ticket ID field in the URL could be changed to view the support tickets filed by other customers.<\/p>\n
This allowed customers to access conversations between other Webafrica users and the company’s support staff.<\/p>\n
However, unless an attacker knew the exact ticked ID for a customer, they would only be able to randomly access support tickets by changing characters in the ticket ID field.<\/p>\n
MyBroadband spoke to Webafrica about the problem, which they said has been fixed.<\/p>\n
No credentials compromised<\/h3>\n
“Webafrica was recently made aware of a bug in our customer zone which allowed certain customers to view random support correspondence of other customers through manipulating ticket IDs in the URL, Webafrica CTO Alan Kirton told MyBroadband.<\/p>\n
Kirton added that Webafrica immediately patched the bug as soon as it was brought to the attention of the company.<\/p>\n
“The information that was exposed was not linked to any billing to service credentials,” he said.<\/p>\n
Upon reviewing the system, Webafrica found that the only exploit of this vulnerability was by the client who reported it and that no other activity was flagged.<\/p>\n
“We would like to thank the customer who disclosed this to us and take this opportunity to assure our customers protection of their information is our top priority,” Kirton said.<\/p>\n
Now read:\u00a0Marriott hacked and 500 million guest records stolen<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"
Webafrica was recently alerted to a security flaw in its online ticket monitoring system, and has now fixed the issue.<\/p>\n","protected":false},"author":341028,"featured_media":242852,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[35,15511,2508],"class_list":["post-287992","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-headline","tag-security-flaw","tag-webafrica"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/287992"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341028"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=287992"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/287992\/revisions"}],"predecessor-version":[{"id":288044,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/287992\/revisions\/288044"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/242852"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=287992"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=287992"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=287992"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}