A security researcher discovered that Indian automotive giant Tata Motors was exposing personal customer information, internal company reports, and dealers' data due to security flaws.
Tata Motors confirmed that it has fixed the issues, which were found in the company's E-Dukaan unit, an e-commerce portal for buying spare parts for Tata-made commercial vehicles.
The portal's web source code included the private keys to access and modify data within Tata Motors' account on Amazon Web Services.
Security researcher Eaton Zveare reported the flaws to TechCrunch, stating that the vulnerabilities put sensitive internal data at risk.
Author's summary: Tata Motors fixed security flaws exposing customer data.