FlyerTalk Forums

FlyerTalk Forums (https://www.flyertalk.com/forum/index.php)
-   Continental OnePass (Pre-Merger) (https://www.flyertalk.com/forum/continental-onepass-pre-merger-488/)
-   -   eService security problem (https://www.flyertalk.com/forum/continental-onepass-pre-merger/39856-eservice-security-problem.html)

rocky Apr 13, 2001 3:41 pm
eService security problem
 
eService is right now letting me view OTHER PEOPLE's itineraries, complete with name, flights and cost. Thankfully, no credit card info is available.

It's not just one person, either ... "My Itineraries" screen shows about 100 itineraries, none of which are mine. I printed out the list and it's about 10 pages worth.

I knew this thing was buggy, but this is inexcusable.

bikenski Apr 13, 2001 3:46 pm
Hey, could you fax me a copy of mine? The system is so slow I can't even view my own, let alone other people's!

rcs85551 Apr 13, 2001 3:54 pm
mine works correctly... but such a security problem is a BIG minus.

idomoneus Apr 13, 2001 4:05 pm
Originally posted by bikenski:
Hey, could you fax me a copy of mine? The system is so slow I can't even view my own, let alone other people's!
I don't think there is any point in you trying to look at your itineraries-- CO's web site says old itineraries were *not* transferred to the new site, and I have yet to find anyone who has actually been able to make a reservation on the new site.

This security bug is extremely serious. I will refrain from using the new site even if the speed problem is resolved.

idomoneus Apr 13, 2001 4:05 pm
Originally posted by rcs85551:
mine works correctly... but such a security problem is a BIG minus.
Are you viewing itineraries that you made before or after the new site went online?

Old Gold Apr 13, 2001 4:17 pm
I tried to look at the itinerary for a flight I booked yesterday, April 12, but the system said that I had "no saved itineraries", even though it said that bookings before April 10 would not be transfered.

I remember some time ago the CO website was showing me other peoples OnePass account balances when I tried to access the "current account balance" feature.

I guess they'll be working overtime tonight. http://www.flyertalk.com/forum/eek.gif

JonNYC Apr 13, 2001 4:38 pm
bikenski, LOL.. veeeeery funny!

TimCLE Apr 14, 2001 8:45 pm
I'm getting other peoples itins also, but they appear to be out of CLE only. I was trying to get a price on a ticket, and typed in CLE to BWI. "No such airport or city code: CLE", and the same stuff for BWI. Also changed CLE to Cleveland and so on. Still gives me the nothing found message.

Maybe I should try using my electronic bump voucher issued yesterday...apparently can be used online since all I have is a promo code and a pin. Since when was getting bumped off a flight a promotion? http://www.flyertalk.com/forum/smile.gif


All times are GMT -6. The time now is 6:39 am.


This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.