A security researcher, known as Bob, has discovered significant vulnerabilities in Frontier Airlines' website and API that expose extensive personal information of passengers. By using a boarding pass code (PNR) and a passenger's last name, or by scanning a barcode, individuals can access details such as home addresses, passport information, TSA PreCheck numbers, and partial credit card data. Despite being notified, Frontier Airlines' response has been criticized as inadequate, with the researcher claiming critical vulnerabilities remain unaddressed. AI
IMPACT Exposes significant personal data, potentially enabling identity theft and security risks for air travelers.
RANK_REASON Disclosure of a security vulnerability in a company's consumer-facing product.
Read on Mastodon — mastodon.social →
AI-generated summary · Google Gemini · from 2 sources. How we write summaries →
