India's largest e-ticketing platform IRCTC fixes bug after school student raises alarm

#Current Affairs, #India, #IRCTC

The Indian Railway Catering and Tourism Corporation Ltd. (IRCTC) fixed a bug on its e-ticketing platform after a plus two lad from the city raised an alarm over the presence of Insecure direct object references (IDOR) – a type of access control vulnerability in the booking site.

The IT wing of the IRCTC which took note of the complaint, immediately resolved the vulnerability issue that has been reported, a senior official said on Tuesday.

“Our e-ticketing system is well protected (now). The issue was reported on August 30 and it was fixed on September 2,” he added.

The IDOR, a type of access control vulnerability, arises when an application uses user-supplied input to access objects directly.

“I accidently discovered a critical IDOR that leaks the transaction details of millions of travelers, when I was trying to book tickets on August 30. It was the most common bug. Immediately, I reported about it to the Indian Computer Emergency Response Team (CERT-In),” P Renganathan, a plus two student of a private school in Tambaram here, said.

“I’ve discovered a critical IDOR that leaks the transaction details of millions of travelers. Go to your account ticket history, click on any ticket with burp suite turned on. Now change the transaction ID to gain access to another’s tickets, you will get all the sensitive details. You can also cancel someone’s ticket or do anything malicious,” he said in an email complaint to CERT-In, under the Union Ministry of Electronics and Information Technology.

As a mitigation, Renganathan who identifies himself as ethical hacker and cyber security researcher, said that the booked user and ticket should be validated so that no one else can access it except the booked user.

On September 11, 2021, he received a mail thanking him for reporting the incident to CERT-In and also a confirmation that the “reported vulnerability has been resolved” by the authorities concerned.

Renganathan, currently pursuing commerce group, has been acknowledged by LinkedIn, United Nations, BYJU’s, Nike, Lenovo, Upstox for reporting security vulnerabilities in their web applications.

Schools across Tamil Nadu re-opened only for classes ninth to twelfth on September 1. “I have opted for online classes owing to the pandemic,” he said.

Internet Explorer Channel Network
News Related

OTHER NEWS

Sunburn Festival Goa to be held in December, only 'fully vaccinated' attendees allowed

Representative image. The 15th edition of Sunburn Festival Goa will be held in December, with access to only those audience members who have been fully vaccinated, the organisers announced on Sunday. The ... Read more »

Congress slams govt over rising fuel prices, Rahul Gandhi alleges 'tax dacoity'

Congress leader Rahul Gandhi. File image. The Congress on Sunday slammed the Centre over rising fuel prices with former party chief Rahul Gandhi taking a dig at the government, saying the ”tax dacoity” on ... Read more »

Amit Shah reaches Jammu; inaugurates new campus of IIT

Amit Shah Amid tight security, Union Home Minister Amit Shah on Sunday arrived here and inaugurated the new campus of Indian Institute of Technology (IIT) Jammu, officials said. Shah, accompanied ... Read more »

FPIs remain net sellers in October, pull out Rs 3,825 crore

Foreign portfolio investors (FPIs) have turned net sellers in Indian market by pulling out Rs 3,825 crore in October so far. In the past two months, huge buying was witnessed ... Read more »

Dabur's new Karwa Chauth ad featuring same-sex couple receives mixed reactions

Screenshot from YouTube With festivals around the corner, brands are coming with new ads in order to make a statement. Ahead of Karva Chauth 2021, Dabur’s Fem Creme Bleach rolled out an ... Read more »

'More contagious' mutant of Delta variant that's scaring UK may be present in India too

A new mutation of the Delta variant of COVID-19 which was being monitored and assessed in the UK is present in India “in very low numbers”. Scientists of the INSACOG ... Read more »

Social Justice Ministry for decriminalising possession of small amount of drugs for personal use

The Social Justice and Empowerment Ministry has recommended decriminalising possession of small quantities of drugs for personal consumption in its review of the Narcotic Drugs and Psychotropic Substances (NDPS) Act ... Read more »

Goods train derails in Chhattisgarh, affects passenger rail traffic movement

Eight wagons of a goods train derailed near Surajpur in Chhattisgarh on Sunday, affecting the movement of passenger rail traffic on the route, a railway official said. No casualty was ... Read more »

Govt gave nod to 157 new medical colleges in India since 2014: Health ministry

Max Healthcare Institute | Veritas Funds Plc on behalf of Veritas Asian Fund acquired 52 lakh shares in the company at Rs 350 per share, SBI Mutual Fund bought 4,28,57,000 ... Read more »

Govt may raise over Rs 10,000 crore via Bharat Bond ETF by December

Kerala had set up India’s first lottery department in 1967. The government is likely to launch the next tranche of the Bharat Bond ETF by December and expects to raise ... Read more »

FPIs remain net sellers in Oct, pull out Rs 3,825 cr

New Delhi, Foreign portfolio investors (FPIs) have turned net sellers in Indian market by pulling out Rs 3,825 crore in October so far. In the past two months, huge buying ... Read more »

PM Modi says notion that Army, police meant for men no longer exists, lauds rise in number of women cops

PM Modi Lauding the jump in the number of women police personnel, Prime Minister Narendra Modi noted on Sunday that it has doubled between 2014 and 2020 and expressed hope ... Read more »

AAP, TMC will be 'marginal players' in Goa assembly polls: P Chidambaram

IMAGE CREDIT: PTI The Aam Aadmi Party and the TMC will be “marginal players” in the Goa assembly polls and the Congress is best positioned to defeat the BJP and ... Read more »

10 years after man's death in Oman in accident, Kerala family yet to get compensation

It has been more than 10 years since she lost her husband in a road accident in Oman where he was working, but till date not a penny of the ... Read more »

High-level panel discussing corrective actions based on Kozhikode plane crash report: Official

The high-level panel, which is examining the recommendations made by the AAIB in its Kozhikode plane crash report, is discussing corrective actions that need to be taken and will submit ... Read more »

Ganga's quality improved since 2014, 68 of 97 locations compliant with bathing standards: NMCG DG

Ganga’s water quality has significantly improved since 2014 with the entire length of the river having more dissolved oxygen than the prescribed minimum level, and 68 out of 97 monitoring ... Read more »

Govt may raise over Rs 10,000 cr via Bharat Bond ETF by Dec

New Delhi: The government is likely to launch the next tranche of the Bharat Bond ETF by December and expects to raise over Rs 10,000 crore to fund growth plans ... Read more »

Aryan Khan case | NCB witness claims Rs 18 crore settlement: Report

In the Aryan Khan drug case, Narcotics Control Bureau (NCB) witness Prabhakar Sail filed an affidavit, saying that he heard KP Gosavi and Sam D’Souza had talked about Rs 25 ... Read more »

Karwa Chauth 2021: Stunning photos of Bollywood celebrities

Shilpa Shetty and her husband Raj Kundra performing Karwa Chauth rituals. Raj Kundra on his Instagram handle wrote “My wife is Indian. She is Hindu, and she is incredible in ... Read more »

India's biggest aromatic garden developed at Lalkuan

India’s biggest aromatic garden boasting of 140 species has been developed at Lalkuan in Nainital district. The garden has been developed over an area of three acres by the research ... Read more »

Is this the era of the retail investor?

Retail investing had been on the rise even before the pandemic hit the world. But Covid-19 gave just the push required to send young investors all over the world to ... Read more »

Gujarat: Over 2,000 people get COVID-19 vaccine at home in Ahmedabad

Representative image. More than 2,000 elderly and differently-abled people have so far received their COVID-19 vaccine doses at home in Gujarat’s Ahmedabad city, as part of the local civic body’s special drive ... Read more »

Punjab must come back to 'real issues' that concern every Punjabi: Navjot Singh Sidhu

Congress leader Navjot Singh Sidhu on Sunday again strongly demanded replacement of Punjab’s police chief and advocate general from his own party’s government, saying otherwise “we will have no face.” ... Read more »

100 crore vaccination doses claim 'false': Sanjay Raut

Sanjay Raut (File image: PTI) Shiv Sena MP Sanjay Raut has alleged that the claim of administration of 100 crore vaccine doses against COVID-19 in the country was “false” and ... Read more »

India preparing digital land records in villages with help of drones, says PM Modi

Prime Minister Narendra Modi on Sunday said that the new drone policy in the country is already showing great results and highlighted that India is one of the first countries ... Read more »

Indian researchers working on early landslide detection systems to reduce fatalities, damage

Widespread devastation, numerous road crashes and deaths caused by landslides in several parts of the country throughout the year have turned the spotlight on the urgent need for its early ... Read more »

More Myanmar refugees entering Mizoram due to clashes: Police

More refugees from Myanmar’s Chin state are entering the southern and eastern border districts of Mizoram due to continuing clashes between the neighbouring country’s army and rebels, a senior police ... Read more »

DU's special cut-off list to release on October 25: Check details

Representative Image The University of Delhi will release the special cut-off list on October 25 for the students who were not able to apply in the first three lists. The ... Read more »

Civilian killed in firing incident in Shopian in J&K

Srinagar, A civilian was killed in a firing incident in Shopian district of Jammu and Kashmir on Sunday, officials said. The incident took place in Zainapora area of Shopian in ... Read more »

India to bargain for undelivered cargoes for renewing LNG import contract with Qatar

Reuters India will bargain for supply of undelivered gas quantities of past years when it negotiates renewal of its multi-billion dollar LNG import deal with Qatar, an official said. Petronet ... Read more »

20 ITBP troops given gallantry medals for standoff clashes with China in Ladakh

ITBP personnel celebrate Republic Day at the banks of Pangong Tso lake. Twenty personnel of the India-China LAC guarding Indo-Tibetan Border Police (ITBP) force, who displayed bravery during the violent ... Read more »

M-cap of five out of top 10 most valued firms down by over Rs 1.42 lakh cr; HUL, RIL most hit

New Delhi: The combined market valuation of five of the top-10 most valued companies eroded by Rs 1,42,880.11 crore last week, with Hindustan Unilever, Reliance Industries and Tata Consultancy Services ... Read more »

Success of COVID-19 vaccination drive shows India's capability: PM Modi

Prime Minister Narendra Modi on October 24 said the success of India’s COVID vaccination drive shows its capability and noted that the country is moving ahead with new energy after ... Read more »

Lakhimpur Kheri: Union minister's son Ashish Mishra contracts dengue

Union minister Ajay Kumar Mishra‘s son Ashish Mishra, who is currently in jail in connection with the Lakhimpur Kheri violence, has contracted dengue, a senior police official said on Sunday. ... Read more »

G-20 summit: PM expected to call for united approach to deal with Afghan crisis

Prime Minister Narendra Modi is expected to pitch for a united global approach in dealing with the situation in Afghanistan and combating challenges of climate change and coronavirus pandemic at ... Read more »

Will Mint Street's digital currency ambition break the banking system?

Whether RBI’s CBDC will bear interest depends on how the country’s central bank takes an approach on its scope, underlying technology, and validation mechanism. The central banks now understand the ... Read more »

G-20 summit: PM Modi expected to call for united approach to deal with Afghan crisis

Prime Minister Narendra Modi (Illustration: Moneycontrol) Prime Minister Narendra Modi is expected to pitch for a united global approach in dealing with the situation in Afghanistan and combating challenges of climate change and coronavirus ... Read more »

China passes new land border law amid military standoff with India

Rising tension between the two nations: Reports suggest that the Indian Air Force is now in the highest state of alert. IAF jets are in a high state of readiness ... Read more »

Govt likely to introduce two key financial sector bills in winter session

New Delhi: The government may introduce two key financial sector bills, including the proposed law for facilitating privatisation of public sector banks as announced by the finance minister in the ... Read more »

Mann Ki Baat: PM Modi hails India's 100-crore vaccination mark

Prime Minister Narendra Modi hailed the nation’s health workers and volunteers for achieving the 1-billion-vaccine milestone on the 82nd edition of his monthly radio programme ‘Mann Ki Baat’ today. “Namaskar…namaskar ... Read more »
On free-english-test.com you will find lots of free English exam practice materials to help you improve your English skills: grammar, listening, reading, writing, ielts, toeic