Technology and gaming content trusted in North America and globally since 1999
8,550 Reviews & Articles | 60,039 News Posts

US Airline Delta flaw let passengers access others boarding passes

Delta Airlines' online portal glitch saw users have the ability to view, edit and use other passengers boarding passes

Chris Smith | Dec 17, 2014 at 05:03 am CST (0 mins, 57 secs reading time)

Hackers of New York recently found a vulnerability in Delta's online portal, which allowed other passengers to view or alter other users boarding passes without knowledge or permission of the original owner.

US Airline Delta flaw let passengers access others boarding passes 028 |

Described as a direct object reference vulnerability, this issue saw Dani Grant from Hackers of New York contact Delta for an explanation. However they only received an apology for an "unfortunate online experience" with Delta choosing not to comment on any flaw that may have, or current does, exist.

In this correspondence with Grant, Delta commented that they "certainly understand how insecure you must have felt due to the unpleasant incident you experienced while trying to view and print boarding pass [sic] form our website". This information saw iTnews also contact the major airline, with the airline reportedly implementing a quick fix soon after being told of this issue.

People have altered and created boarding passes in the past, with Chris Soghoian being pinned by the FBI in 2006 for doing exactly the same thing. He even created a boarding pass with the name "Osama bin Laden" on Northwest Airlines just to prove its possibility.

US Airline Delta flaw let passengers access others boarding passes 029 |
Chris Smith


I'm a competitive gamer and was an eSports employee. Recent changes have seen me hang up the mouse and move over to the technology world, covering all news for TweakTown, ranging from gaming news to opinion articles and the latest tech releases. Expect to see a few different articles on international eSports news and competitive game releases, as well as audio and mobile device content.

Related Tags