United Airlines website bug exposed traveler ticket data.
An error on the United Airlines website allowed anyone to access the information of travelers who requested a refund.
The airline’s website allows users to check the status of their refund by entering their ticket number and last name. But the site does not validate the last name, which allows access to other travelers’ refund information by changing the ticket number.
See also: United Airlines eliminates charges for flight changes.
Computer security expert Oliver Linow, who found the error, told TechCrunch he could see travelers’ last names, the type of payment and currency used to purchase the ticket, and the amount of the refund.
Linow said he reported the problem to United on July 6. The airline took a month to fix it.
Related Topics
United Airlines Boosts Transpacific Network: Launches Unprecedented Route to Sapporo and New Chicago-Tokyo Narita Connection
FAA to Invest $16.5 Million to Equip Airport Vehicles with Transponders Following LaGuardia Accident
Allegiant Completes Acquisition of Sun Country Airlines, Consolidating Leadership in U.S. Leisure Travel
Breeze Airways Marks Fifth Anniversary with In-Flight Dining Overhaul
Líder en noticias de aviación