Vulnerability reported on CDSL Ventures website; resolved now: MoS for Finance Pankaj Chaudhary
The minister said that the vulnerability has been closed now.
![Vulnerability reported on CDSL Ventures website; resolved now: MoS for Finance Pankaj Chaudhary Vulnerability reported on CDSL Ventures website; resolved now: MoS for Finance Pankaj Chaudhary](https://cdn.zeebiz.com/sites/default/files/styles/zeebiz_850x478/public/2021/11/29/167489-untitled-design-2021-11-29t194813611.jpg?itok=5S6o21Zs&c=c5af8c0f92ccc8e249257bf0f1cb18e8)
A vulnerability was reported on the CDSL Ventures website that showed the possibility of getting access to the details of another user by changing the reference ID of the user, Minister of State for Finance Pankaj Chaudhary informed the Lok Sabha on Monday.
WATCH | Click on Zee Business Live TV Streaming Below:
The minister said that the vulnerability has been closed now.
"There has been no reported authorization vulnerability in any of the application programming interfaces (APIs) and/or website of Central Depository Services Ltd (CDSL). However, a vulnerability in the website of CDSL Ventures Limited (CVL), which is a subsidiary of CDSL and registered as KYC Registration Agency (KRA) with SEBI, was reported," Chaudhary said in a written reply.
He was responding to questions by Lok Sabha MP Manish Tewari on vulnerability in the system.
A cyber security firm CyberX9 had reported that a vulnerability in the CDSL Ventures Limited (CVL) has exposed personal and financial data of over 4 crore Indian investors twice in 10 days.
Chaudhary said the National Critical Information Infrastructure Protection Centre (NCIIPC) reported on October 20 that the web portal of CVL is vulnerable to insecure direct object references.
The vulnerability was observed on the login page of CVL showing a possibility of getting access to the details of another user by changing the reference ID of the user, the minister said.
"The issue pertains to a specific page in the CVL website and is not related to any APIs. The vulnerability was mitigated by CVL on October 26, 2021, with a quick fix by encrypting the reference ID, which was getting passed as a clear text," Chaudhary said.
A second vulnerability alert was received by CVL on October 31, and since development was already underway at CVL for a permanent fix, the vulnerability was mitigated on the same day and confirmed to Indian Computer Emergency Response Team (CERT-In), he added.
"A forensic audit was also conducted as directed by the Securities and Exchange Board of India (SEBI). The external auditor of CVL also checked and certified that the reported vulnerability has been closed," Chaudhary said
Get Latest Business News, Stock Market Updates and Videos; Check your tax outgo through Income Tax Calculator and save money through our Personal Finance coverage. Check Business Breaking News Live on Zee Business Twitter and Facebook. Subscribe on YouTube.
RECOMMENDED STORIES
![https://www.zeebiz.com/personal-finance/photo-gallery-sip-swp-monthly-pension-income-retirement-corpus-planning-calculator-inr-rs-20000-monthly-investment-for-15-years-inr-99000-monthly-return-for-42-years-313283](https://cdn.zeebiz.com/sites/default/files/styles/zeebiz_700x394/public/2024/09/06/316973-rupee-pixabay-take-1.jpg?itok=02-hJh59)
SIP+SWP: Rs 20,000 monthly SIP for 16 years to get Rs 99,000 monthly income for 42 years; how is it possible?
![https://www.zeebiz.com/market-news/news-bajaj-finserv-rvnl-borosil-renewables-carysil-railtel-corporation-stocks-to-buy-hdfc-securities-recommendation-picks-target-stop-loss-bse-nse-313386](https://cdn.zeebiz.com/sites/default/files/styles/zeebiz_700x394/public/2024/09/06/317091-26.jpg?itok=gE1cWt7z)
RVNL, Bajaj Finserv and 5 more: Brokerage recommends buying these 7 stocks for up to 3 months | Check target, stop loss
![https://www.zeebiz.com/personal-finance/photo-gallery-nps-vs-ups-vs-ops-monthly-pension-income-retirement-corpus-calculator-what-will-be-your-pension-on-inr-rs-10000-contribution-for-35-years-expert-calculations-313361](https://cdn.zeebiz.com/sites/default/files/styles/zeebiz_700x394/public/2024/09/06/317060-rupee-pixabay-take-2.jpg?itok=cOVdof_v)
NPS vs UPS vs OPS: What will be your monthly pension if you contribute Rs 10,000 monthly for 35 years? Get expert calculations
![https://www.zeebiz.com/personal-finance/photo-gallery-top-7-etf-sip-mutual-funds-in-5-years-calculator-how-inr-rs-21000-monthly-investment-has-grown-in-nifty-sp-bse-next-50-cpse-uti-icici-pru-nippon-india-motilal-oswal-bharat-22-nift-mid-infra-313306](https://cdn.zeebiz.com/sites/default/files/styles/zeebiz_700x394/public/2024/09/06/316994-indian-currency-pixabay-take-1.jpg?itok=JURVEkst)
Top 7 ETF Mutual Funds With Highest SIP Returns in 5 Years: How Rs 21,000 monthly SIP has grown in each ETF over the years
![https://www.zeebiz.com/personal-finance/photo-gallery-sbi-senior-citizen-fd-fixed-deposit-latest-interest-rate-2024-calculator-what-be-maturity-amount-with-return-on-investments-of-inr-900000-lakh-in-1-3-5-year-guaranteed-return-scheme-retirement-planning-313221](https://cdn.zeebiz.com/sites/default/files/styles/zeebiz_700x394/public/2024/09/06/316909-note-coin-pixabay-take-1.jpg?itok=3RPKcBYE)
SBI Senior Citizen FD Rates 2024: What you can get if you invest Rs 3 lakh, Rs 5 lakh, Rs 7 lakh, and Rs 9 lakh in 1-, 3-, and 5-year FDs
07:49 PM IST