Applebee's forced to fix serious security issue which exposed customer data
- Applebee’s fixes mobile app flaw that exposed customer data through hardcoded database credentials
- Researchers found access to personal information including names, contact details, birthdays, and account metadata
- No evidence of abuse was found, but the incident highlights the persistent risk of hardcoded secrets in software
Applebee’s has fixed a serious flaw in its mobile app that exposed sensitive customer information to pretty much anyone. Whether or not anyone malicious actually found this vulnerability and exploited it is not known at this time.
The chain has an Android mobile app that allows customers to browse the menu, customize meals, place orders for delivery or pickup, save their favorites, or receive personalized food recommendations.
A security researcher from What Security called Robert Wiggins, used AI to analyze the source code of the app and found a gaping hole - hardcoded credentials for a company database.
Notifying the business
The database contained plenty...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
