{"id":69854,"date":"2013-02-06T14:03:32","date_gmt":"2013-02-06T12:03:32","guid":{"rendered":"http:\/\/mybroadband.co.za\/news\/?p=69854"},"modified":"2013-02-06T14:05:16","modified_gmt":"2013-02-06T12:05:16","slug":"sita-website-showing-client-data","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/69854-sita-website-showing-client-data.html","title":{"rendered":"SITA website showing client data"},"content":{"rendered":"

A web application running on the State Information Technology Agency<\/a>\u2019s domain is exposing client data to anyone with a link to it.<\/p>\n

The page in question is indexed in Google<\/a>, so a search for the correct keywords causes the search engine to return a link to it.<\/p>\n

As shown in the screenshot below, the page displays the SITA logo along with the words \u201cSITA Service Management\u201d and \u201cdeveloped by SMC\u201d and appears to be a log of faults and their resolutions.<\/p>\n

SITA explains on its website<\/a> that its Service Management Centre (SMC) is the single point of entry for specific services to clients.<\/p>\n

\u201cThese include countrywide IT services to Government clients and voice business services on behalf of Government to the South African citizens,\u201d the site states.<\/p>\n

\"SITA<\/a>

SITA SMC reports exposed data (click for full size screenshot)<\/p><\/div>\n

While the SMC web application only appears to be revealing data from December 2010, among the details shown are the customer\u2019s name and contact number, as well as the organisation from which they are reporting the fault.<\/p>\n

A summary of the fault and an indication of whether SITA met its service level agreement (SLA) is also shown.<\/p>\n

An interesting statistic to come from this is that of the 2,196 faults exposed by the site, 1362 (almost 63%) were resolved within the SLA deadline during December 2010.<\/p>\n

SITA was contacted for comment, but did not respond by the time of publication.<\/p>\n

More SITA news<\/h3>\n

Try hacking this<\/strong><\/a><\/p>\n

Websites defaced, not hacked: Sita<\/strong><\/a><\/p>\n

South African websites hacked<\/strong><\/a><\/p>\n

SA Police to get network upgrade<\/strong><\/a><\/p>\n

Sita promises greater efficiency<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

A website on the State Information Technology Agency\u2019s domain is making customer data publicly available<\/p>\n","protected":false},"author":15,"featured_media":69902,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[35,18070,18068],"class_list":["post-69854","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-headline","tag-sita-service-management-centre-smc","tag-state-information-technology-agency-sita"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/69854"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=69854"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/69854\/revisions"}],"predecessor-version":[{"id":69906,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/69854\/revisions\/69906"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/69902"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=69854"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=69854"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=69854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}