Get the latest tech news
A bug in an Irish government website that exposed COVID-19 vaccination records took two years to publicly disclose
The vulnerability — now fixed — allowed anyone registering with the HSE vaccination portal to access the health information of another user.
But details of the vulnerability weren’t revealed until this week after attempts to coordinate public disclosure with the government agency stalled and ended. “Thankfully, the ability to see everyone’s vaccination administration details was not immediately obvious to regular users who were using the portal as intended,” Costello wrote. His blog post included a multi-year timeline revealing a back and forth between various government departments that were unwilling to take claim to public disclosure.
Or read this on TechCrunch