WHID 2007-62: A security flaw in Passport Canada's website
The Web site of the Canadian passports authority enables users to access others' record by modifying a value of a parameter in the URI.
Additional information:
- Passport applicant finds massive privacy breach [The Globe and Mail, Dec 4 2007]
- Passport Canada strengthens online security following breach [CBC, Dec 4 2007]
Attack Method:
Incident Outcome:
