eService security problem
#1
Original Poster
Original Member



Join Date: May 1998
Location: SFO/JFK
Programs: Hilton: Diamond, Bonvoy: Lifetime Titanium, Hyatt: Platinum, AS: MVP Gold
Posts: 632
eService security problem
eService is right now letting me view OTHER PEOPLE's itineraries, complete with name, flights and cost. Thankfully, no credit card info is available.
It's not just one person, either ... "My Itineraries" screen shows about 100 itineraries, none of which are mine. I printed out the list and it's about 10 pages worth.
I knew this thing was buggy, but this is inexcusable.
It's not just one person, either ... "My Itineraries" screen shows about 100 itineraries, none of which are mine. I printed out the list and it's about 10 pages worth.
I knew this thing was buggy, but this is inexcusable.
#2

Join Date: Nov 2000
Location: DEN / OGG
Programs: Former UA GS, demoted to lowly 1K MM
Posts: 739
Hey, could you fax me a copy of mine? The system is so slow I can't even view my own, let alone other people's!
#3
Join Date: Oct 2000
Location: Munich, Germany
Programs: LH HON, DL FO/MM, Marriott Lifetime Platinum, Accor Lifetime Platinum, Sixt Diamond
Posts: 6,174
mine works correctly... but such a security problem is a BIG minus.
#4
Join Date: Apr 2001
Location: SFO, Starwood Gold
Posts: 252
Originally posted by bikenski:
Hey, could you fax me a copy of mine? The system is so slow I can't even view my own, let alone other people's!
Hey, could you fax me a copy of mine? The system is so slow I can't even view my own, let alone other people's!
This security bug is extremely serious. I will refrain from using the new site even if the speed problem is resolved.
#5
Join Date: Apr 2001
Location: SFO, Starwood Gold
Posts: 252
Originally posted by rcs85551:
mine works correctly... but such a security problem is a BIG minus.
mine works correctly... but such a security problem is a BIG minus.
#6
Original Member




Join Date: May 1998
Location: Tucson, Southern Arizona, North America, Western Hemisphere, The Earth, a small planet in the solar system. Previously OnePass Infinite Platinum Elite, now over entitled 1K
Posts: 2,293
I tried to look at the itinerary for a flight I booked yesterday, April 12, but the system said that I had "no saved itineraries", even though it said that bookings before April 10 would not be transfered.
I remember some time ago the CO website was showing me other peoples OnePass account balances when I tried to access the "current account balance" feature.
I guess they'll be working overtime tonight.
I remember some time ago the CO website was showing me other peoples OnePass account balances when I tried to access the "current account balance" feature.
I guess they'll be working overtime tonight.
#7
Suspended
Join Date: Mar 2001
Location: FIND ME ON TWITTER FOR THE LATEST
Posts: 27,729
bikenski, LOL.. veeeeery funny!
#8




Join Date: Feb 2001
Location: Seat 1A or 59B
Posts: 564
I'm getting other peoples itins also, but they appear to be out of CLE only. I was trying to get a price on a ticket, and typed in CLE to BWI. "No such airport or city code: CLE", and the same stuff for BWI. Also changed CLE to Cleveland and so on. Still gives me the nothing found message.
Maybe I should try using my electronic bump voucher issued yesterday...apparently can be used online since all I have is a promo code and a pin. Since when was getting bumped off a flight a promotion?
Maybe I should try using my electronic bump voucher issued yesterday...apparently can be used online since all I have is a promo code and a pin. Since when was getting bumped off a flight a promotion?

