Organisation
organisation:qantas
Also: Qantas Airline
Airline whose Manage Booking page exposed passenger data in page-source JSON after authentication with a booking reference and surname.
Airline whose Manage Booking page exposed passenger data in page-source JSON after authentication with a booking reference and surname.
“So, I went to the Qantas website – that’s the airline”
“inside the page source of the Manage Booking page”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | INVOLVES | passport number exposure | Explicit | 84 |
| incoming | USES | TProphet | Explicit | 84 |
passport number exposure INVOLVES Qantas
The incident involved access to Tony Abbott’s Qantas Manage Booking page and exposure of information in that page.
Explicit Confidence 99% · Jack Rhysider EP 84 Details
“Alex was now logged into Qantas Airline’s [00:10:00] website as the former Australian Prime Minister Tony Abbott”
TProphet uses the Qantas website to find Cathay Pacific award-flight availability, while booking with Alaska points.
Explicit Confidence 97% · TProphet EP 84 Details
“the one that I use the most for finding Cathay flights is Qantas”