接受更新的隐私和cookie政策

亲爱的用户,

ET电信隐私和cookie政策已更新，以与欧盟的新数据法规保持一致。请审阅并接受以下更改以继续使用本网站。

你可以看到隐私政策和我们的饼干的政策．我们使用cookie来确保您在我们的网站上获得最佳体验。

如果您选择忽略此消息，我们将假设您乐于接收ET Telecom上的所有cookie。

的名字 提供者 到期 类型 目的
的名字 提供者 到期 类型 目的
的名字 目的
乐动扑克新闻网站
  • 遵循我们:
乐动体育1002乐动体育

独家

CDSL Ventures网站报告的漏洞;现在解决:MoS金融

发言人说:“中央存管服务有限公司(CDSL)的任何应用程序编程接口及/或网站，均未报告有授权漏洞。”然而，据报道，CDSL风险投资有限公司(CVL)的网站存在漏洞，该公司是CDSL的子公司，并在SEBI注册为KYC注册机构(KRA)。”Chaudhary在书面回复中说。

  • PTI
  • 美国东部时间2021年11月30日08:09
CDSL Ventures网站报告的漏洞;现在解决:MoS金融
新德里:上报告了一个漏洞CDSL合资企业印度财政部长潘卡吉·乔杜里在接受路透社采访时表示，该网站显示，通过更改用户的参考ID，可以获得另一名用户的详细信息人民院周一。部长说现在漏洞已经被关闭了。

“没有任何应用程序编程接口(api)和/或网站的授权漏洞报告中央存管服务有限公司（CDSL)．然而，CDSL风险投资有限公司(CVL)的网站存在漏洞，该公司是CDSL的子公司，注册为KYC注册机构(KRA)和SEBI，被报道了，”乔杜里在书面回复中说。

他是在回答人民院议员Manish Tewari关于系统脆弱性的问题。

网络安全公司CyberX9报告称，CDSL风险投资有限公司(CVL)的一个漏洞在10天内两次暴露了超过4000万印度投资者的个人和财务数据。

Chaudhary说，国家关键信息基础设施保护中心(NCIIPC) 10月20日报告称，CVL的门户网站容易受到不安全的直接对象引用的攻击。

该部长表示，在CVL的登录页面上观察到该漏洞，显示有可能通过更改用户的参考ID来访问另一个用户的详细信息。

“该问题涉及CVL网站的一个特定页面，与任何api无关。CVL于2021年10月26日通过加密参考ID来快速修复该漏洞，该ID以明文形式传递，”乔杜里说。

他补充说，CVL于10月31日收到了第二次漏洞警报，由于CVL已经在进行永久性修复的开发，该漏洞在同一天得到缓解，并向印度计算机应急响应小组(CERT-In)确认。

他说:“法庭也按照印度证券交易委员会(SEBI)。CVL的外部审计人员也检查并证明报告的漏洞已经关闭。”Chaudhary说。

关注并与我们联系，脸谱网，Linkedin，Youtube
\"Vulnerability<\/figure>New Delhi: A vulnerability was reported on the CDSL Ventures<\/a> website that showed the possibility of getting access to the details of another user by changing the reference ID of the user, Minister of State for Finance Pankaj Chaudhary informed the Lok Sabha<\/a> on Monday. The minister said that the vulnerability has been closed now.

\"There has been no reported authorization vulnerability in any of the application programming interfaces (APIs) and\/or website of Central Depository Services Ltd<\/a> (CDSL<\/a>). However, a vulnerability in the website of CDSL Ventures Limited (CVL), which is a subsidiary of CDSL and registered as KYC Registration Agency<\/a> (KRA) with SEBI, was reported,\" Chaudhary said in a written reply.

He was responding to questions by Lok Sabha MP Manish Tewari on vulnerability in the system.

<\/div><\/div>A cyber security firm CyberX9 had reported that a vulnerability in the CDSL Ventures Limited (CVL) has exposed personal and financial data of over 4 crore Indian investors twice in 10 days.

Chaudhary said the National Critical Information Infrastructure Protection Centre (NCIIPC) reported on October 20 that the web portal of CVL is vulnerable to insecure direct object references.

The vulnerability was observed on the login page of CVL showing a possibility of getting access to the details of another user by changing the reference ID of the user, the minister said.

\"The issue pertains to a specific page in the CVL website and is not related to any APIs. The vulnerability was mitigated by CVL on October 26, 2021, with a quick fix by encrypting the reference ID, which was getting passed as a clear text,\" Chaudhary said.

A second vulnerability alert was received by CVL on October 31, and since development was already underway at CVL for a permanent fix, the vulnerability was mitigated on the same day and confirmed to Indian Computer Emergency Response Team (CERT-In), he added.

\"A forensic audit was also conducted as directed by the Securities and Exchange Board of India<\/a> (SEBI). The external auditor of CVL also checked and certified that the reported vulnerability has been closed,\" Chaudhary said.<\/div><\/div>
Follow and connect with us on Twitter<\/a>, Facebook<\/a>, Linkedin<\/a>, Youtube<\/a><\/div>","NumberOfSentences":{"minfo":"13.0","minfoseo":"13-0"},"AutomatedReadabilityIndex":{"minfo":"14.0","minfoseo":"14-0"},"LastPublishMilliTime":{"minfo":"1638240076857","minfoseo":"1638240076857"},"ReadabilityGradeLevel":{"minfo":"College","minfoseo":"college"},"HashCode":{"minfo":"-1462117297","minfoseo":"-1462117297"},"latestnewsflag":{"minfo":"1.0","minfoseo":"1-0"},"NumberOfCharacters":{"minfo":"2134.0","minfoseo":"2134-0"},"NumberOfWords":{"minfo":"344.0","minfoseo":"344-0"},"key":{"0":{"keyid":"494412","value":"cdsl ventures","smid":"0","keynameseo":"cdsl-ventures","keytype":"","keycount":"totalcount","weightage":"100"},"1":{"keyid":"6355630","value":"securities and exchange board of india","smid":"0","keynameseo":"securities-and-exchange-board-of-india","keytype":"","keycount":"totalcount","weightage":"20"},"3":{"keyid":"2414301","value":"MoS Finance","smid":"0","keynameseo":"MoS-Finance","keytype":"","keycount":"totalcount","weightage":"20"},"4":{"keyid":"6355187","value":"lok sabha","smid":"0","keynameseo":"lok-sabha","keytype":"","keycount":"totalcount","weightage":"20"},"5":{"keyid":"722868","value":"kyc registration agency","smid":"0","keynameseo":"kyc-registration-agency","keytype":"","keycount":"totalcount","weightage":"20"},"6":{"keyid":"496371","value":"know your customer","smid":"0","keynameseo":"know-your-customer","keytype":"","keycount":"totalcount","weightage":"20"},"7":{"keyid":"9027849","value":"cybersecurity news","smid":"0","keynameseo":"cybersecurity-news","keytype":"","keycount":"totalcount","weightage":"20"},"8":{"keyid":"570811","value":"central depository services ltd","smid":"0","keynameseo":"central-depository-services-ltd","keytype":"","keycount":"totalcount","weightage":"20"},"9":{"keyid":"6422046","value":"CDSL","smid":"0","keynameseo":"CDSL","keytype":"","keycount":"totalcount","weightage":"20"}},"authorsplit":[],"similarlytagged":[{"msid":"87994610","stname":"Vulnerability reported on CDSL Ventures website; resolved now: MoS Finance","artsyn":"\"There has been no reported authorization vulnerability in any of the application programming interfaces (APIs) and\/or website of Central Depository Services Ltd (CDSL). However, a vulnerability in the website of CDSL Ventures Limited (CVL), which is a subsidiary of CDSL and registered as KYC Registration Agency (KRA) with SEBI, was reported,\" Chaudhary said in a written reply.","seolocation":"telecomnews\/vulnerability-reported-on-cdsl-ventures-website-resolved-now-mos-finance","seolocationalt":"Vulnerability reported on CDSL Ventures website; resolved now: MoS Finance","url_seo":"vulnerability-reported-on-cdsl-ventures-website-resolved-now-mos-finance"}],"primeid":0,"storytags":{"categoryTag":{"sectionid":"49830939","sectionname":"TelecomNews","seolocation":"telecomnews","seolocationalt":"telecomnews"},"otherTags":[{"keyid":"494412","value":"cdsl ventures","smid":"0","keynameseo":"cdsl-ventures","keytype":"","keycount":"totalcount","weightage":"100"},{"keyid":"6355630","value":"securities and exchange board of india","smid":"0","keynameseo":"securities-and-exchange-board-of-india","keytype":"","keycount":"totalcount","weightage":"20"},{"keyid":"28351","value":"Policy","smid":"0","keynameseo":"Policy","keytype":"","keycount":"totalcount","weightage":"20"},{"keyid":"2414301","value":"MoS Finance","smid":"0","keynameseo":"MoS-Finance","keytype":"","keycount":"totalcount","weightage":"20"},{"keyid":"6355187","value":"lok sabha","smid":"0","keynameseo":"lok-sabha","keytype":"","keycount":"totalcount","weightage":"20"},{"keyid":"722868","value":"kyc registration agency","smid":"0","keynameseo":"kyc-registration-agency","keytype":"","keycount":"totalcount","weightage":"20"},{"keyid":"496371","value":"know your customer","smid":"0","keynameseo":"know-your-customer","keytype":"","keycount":"totalcount","weightage":"20"},{"keyid":"9027849","value":"cybersecurity news","smid":"0","keynameseo":"cybersecurity-news","keytype":"","keycount":"totalcount","weightage":"20"},{"keyid":"570811","value":"central depository services ltd","smid":"0","keynameseo":"central-depository-services-ltd","keytype":"","keycount":"totalcount","weightage":"20"},{"keyid":"6422046","value":"CDSL","smid":"0","keynameseo":"CDSL","keytype":"","keycount":"totalcount","weightage":"20"}],"filterTags":[]},"formattedTags":{"companyTags":[],"otherTags":[{"name":"securities and exchange board of india"},{"name":"central depository services ltd"},{"name":"kyc registration agency"},{"name":"know your customer"},{"name":"cybersecurity news"},{"name":"cdsl ventures"},{"name":"MoS Finance"},{"name":"lok sabha"},{"name":"Policy"},{"name":"CDSL"}],"newsCategoryTags":[{"name":"TelecomNews","seolocation":"telecomnews"}],"breadcrumbTags":["cdsl ventures","securities and exchange board of india","Policy","MoS Finance","lok sabha","kyc registration agency","know your customer","cybersecurity news","central depository services ltd","CDSL"],"filterTags":[]},"breadcrumbTags":["cdsl ventures","securities and exchange board of india","Policy","MoS Finance","lok sabha","kyc registration agency","know your customer","cybersecurity news","central depository services ltd","CDSL"],"Alttitle":{"minfo":""},"Altdescription":{"minfo":""},"amp_url":"\/\/www.iser-br.com\/amp\/news\/vulnerability-reported-on-cdsl-ventures-website-resolved-now-mos-finance\/87994610","associated":{"articles":{"87994610":{"msid":"87994610","stname":"Vulnerability reported on CDSL Ventures website; resolved now: MoS Finance","artsyn":"\"There has been no reported authorization vulnerability in any of the application programming interfaces (APIs) and\/or website of Central Depository Services Ltd (CDSL). However, a vulnerability in the website of CDSL Ventures Limited (CVL), which is a subsidiary of CDSL and registered as KYC Registration Agency (KRA) with SEBI, was reported,\" Chaudhary said in a written reply.","seolocation":"telecomnews\/vulnerability-reported-on-cdsl-ventures-website-resolved-now-mos-finance","seolocationalt":"Vulnerability reported on CDSL Ventures website; resolved now: MoS Finance","url_seo":"vulnerability-reported-on-cdsl-ventures-website-resolved-now-mos-finance"}}}}" data-news-images="[{"msid":"87994625","msname":"pankaj-chaudhary","msnameseo":"pankaj-chaudhary","mediatype":"1","artdate":"2021-08-03 21:17:00.0","caption":""}]" data-newsletter-by="0" data-newsletter-date="a" data-hasbottomcarousel="" data-alldetailsopen="0" data-multipleanalyticshit="" data-deeplink="https://ettelecom.app.link?$deeplink_path=" data-socialshareformat="default">
阅读App
阅读App

赞助的故事

      大多数读

      最多阅读策略

      电信的电视