The Download
Security researchers were able to compromise an airline's database by exploiting an SQL injection vulnerability, which allowed them to infiltrate the "Known Crewmember" system. This breach enabled them to gain unauthorized access to sensitive information, including pilot communication lines and cockpit systems. The vulnerability in the system's code permitted attackers to manipulate database queries, thereby escalating their privileges and obtaining critical data that could potentially be used for malicious purposes or to further infiltrate other areas of the airline's operations.
What You Can Do
We often talk about the role of automated pen testing in identifying a critical attack surface: web applications. The security researchers did some manual pen testing and found this MySQL vulnerability, with some serious consequences.
You should use ThreatMate's automated pen testing to identify web application vulnerabilities in addition to our vulnerability scan. Sign up for a demo today.
To Learn More:
Comments