IRCTC fixes bug after school student raises alarm

The Indian Railway Catering and Tourism Corporation Ltd. (IRCTC NSE 2.33 %) fixed a bug on its e-ticketing platform after a plus two lad from the city raised an alarm over the presence of Insecure direct object references (IDOR) – a type of access control vulnerability in the booking site.

The IT wing of the IRCTC which took note of the complaint, immediately resolved the vulnerability issue that has been reported, a senior official said on Tuesday. “Our e-ticketing system is well protected (now). The issue was reported on August 30 and it was fixed on September 2,” he added.