India’s national logistics portal exposed sensitive personal data, trade records
Reading Time: < 1 minutesIndia’s state-owned logistics portal has fixed misconfigurations and vulnerabilities that exposed sensitive personal data and various state and private trade records.
Called the National Logistics Portal-Marine, the website made the sensitive and private data public due to misconfigured Amazon S3 buckets. It also carried a JavaScript file that included login credentials into the web source code.
‘With respect to the trailing email, the concerned organization has confirmed that the vulnerability is mitigated,’ CERT-In said while confirming the fix.
The ports, shipping and waterways ministry and the firm responsible for the portal Portall, a subsidiary of India’s business conglomerate JM Baxi, did not respond to multiple requests for comment prior to publication.
The ports, shipping and waterways ministry launched the National Logistics Portal-Marine in January. The project aims to work as a ‘single window’ for all logistics trade processes and covers transportation modes in the waterways, roadways and airways. It also includes an online marketplace to access end-to-end logistic services.
The data exposure incident comes just over a month after India, the second-largest Internet market after China, received its anticipated privacy law, the Digital Personal Data Protection Act, 2023. The law outlines guidelines for private companies’ use of personal data, but exempts the Indian government from legal obligations.
Reference: https://techcrunch.com/2023/10/02/india-national-logistics-portal-marine-data-expose/
Ref: techcrunch
MediaDownloader.net -> Free Online Video Downloader, Download Any Video From YouTube, VK, Vimeo, Twitter, Twitch, Tumblr, Tiktok, Telegram, TED, Streamable, Soundcloud, Snapchat, Share, Rumble, Reddit, PuhuTV, Pinterest, Periscope, Ok.ru, MxTakatak, Mixcloud, Mashable, LinkedIn, Likee, Kwai, Izlesene, Instagram, Imgur, IMDB, Ifunny, Gaana, Flickr, Febspot, Facebook, ESPN, Douyin, Dailymotion, Buzzfeed, BluTV, Blogger, Bitchute, Bilibili, Bandcamp, Akıllı, 9GAG