The flaw in the third-party app for small airlines potentially allows malicious actors to bypass TSA security measures, raising grave concerns about airport safety.
The vulnerability discovered by researchers Ian Carroll and Sam Curry showcased a significant risk, as it allowed anyone with basic SQL knowledge to access sensitive airline systems.
Despite reporting the issue to the FAA and DHS last April, only the FAA has responded appropriately, while the TSA's statements about the vulnerability have been dangerously misleading.
Carroll and Curry described SQL injection attacks as one of the most common methods used by hackers to manipulate web databases, indicating a significant threat to aviation security.
[
Collection
]
[
|
...
]