StateScoop: The official website of the city of Columbia, South Carolina, had a flaw in its search tool that allowed people to see passwords used to access municipal databases and email servers, an internet security researcher discovered this week.
Keyword searches for terms not found on the city’s website turned up a results page meant only for IT administrators that contained credentials that could’ve been used to access internal networks, steal sensitive resident and employee information, or commandeer the city government’s email system.
The most significant government policy, business, and technology news and analysis delivered to your inbox.
Subscribe Nowi360Gov is an intelligent network of websites and e-newsletters that provides government business, policy and technology leaders with a single destination for the most important news and analysis regarding their agency strategies and initiatives.
Telephone: 202.760.2280
Toll Free: 855.i360.Gov
Fax: 202.697.5045
The most significant government policy, business, and technology news and analysis delivered to your inbox.
Subscribe Now