Actions
Bug #78
closedFeature #65: Security Audit
[Security Audit ] 13 -Aadhaar is Not Encrypted in Transit
Start date:
24/04/2024
Due date:
% Done:
100%
Estimated time:
(Total: 0:00 h)
Deployed In:
Category:
Description
13 -Aadhaar is Not Encrypted in Transit
CWE : CWE-311
Description :
The software transmits sensitive or security-critical data in cleartext in a communication
channel.
Affected Path(s) :
https://earogya.satragroup.in/patient/0/patient-Registration *-Applicable to entire
application
Impact :
Anyone can read the information by gaining access to the channel being used for
communication.
Recommendation :
Encrypt the data with a reliable encryption scheme before transmitting.
Evidence/Proof Of Concept :
Step 1: As seen below all the actions of the user including the aadhar are stored in plain text.
Files
Actions