Your Cart Is Empty
✖No products in the cart.
Honda’s e-commerce platform has been found to have security vulnerabilities that could have been exploited to gain unrestricted access to sensitive dealer information by security researchers. Eaton Zveare explained that “Broken/missing access controls made it possible to access all data on the platform, even when logged in as a test account.”
The platform is built for the sale of power equipment, marine engines, and automotive and motorcycle parts. Dealers can register themselves to the platform and place orders for Honda’s numerous products, but it also involves sensitive payment and personal information.
Logged-in test accounts of the website used for testing purposes lacked necessary access restrictions and risked exposing everything from financial transaction records to end-customer data. The issues were discovered by Eaton Zveare, who highlighted the significance of properly managing logins, particularly test accounts, when trying to assess potential flaws in the security of a new website.
Honda was informed about the issues before the researcher’s report, which could have resulted in the exposure of sensitive information of Honda’s dealers and customers. The company has hired external security professionals to investigate the issue and is expected to implement changes and security improvements to address the vulnerability.
The security vulnerability discovered in Honda’s e-commerce platform has brought attention to the significance of properly managing logins and access restrictions. The access controls were missing or broken, leaving personal and financial transaction information for dealers at risk of potential exposure. Honda has responded to the issue and hired external security professionals to investigate and improve the system’s security to prevent any future security breaches.
Original Article: https://thehackernews.com/2023/06/password-reset-hack-exposed-in-hondas-e.html
No products in the cart.