Recently, security researchers Ian Carroll and Sam Curry discovered a critical vulnerability in the login systems used by the Transportation Security Administration (TSA) to verify airline crew members at airport security checkpoints. This vulnerability allowed individuals with even a basic knowledge of SQL injection to add themselves to airline rosters, potentially gaining unauthorized access to secure areas within airports.
Carroll and Curry stumbled upon this vulnerability while investigating the third-party website of a vendor known as FlyCASS, which offers smaller airlines access to the TSA’s Known Crewmember (KCM) system and Cockpit Access Security System (CASS). By entering a simple apostrophe into the username field, they triggered a MySQL error, indicating that the username was directly inserted into the login SQL query. This revelation led them to confirm the existence of a SQL injection vulnerability using sqlmap.
Upon successfully exploiting the vulnerability, Carroll and Curry were able to log into FlyCASS as an administrator of Air Transport International by using the username ‘ or ‘1’=’1 and password ‘) OR MD5(‘1’)=MD5(‘1’. Once inside, they discovered that there were no further checks or authentications in place, allowing them to add crew records and photos for any airline utilizing FlyCASS. This unrestricted access could potentially enable malicious actors to present fake employee numbers and gain entry into KCM security checkpoints.
The implications of this security flaw are severe, as it compromised the integrity of the TSA’s airline crew verification systems. The ability for unauthorized individuals to manipulate airline rosters and access secure areas within airports poses a significant risk to aviation security. Furthermore, the lack of additional checks or verifications after initial login raises questions about the overall security measures in place to safeguard sensitive information and prevent unauthorized access.
In light of this vulnerability, it is imperative for the TSA and other aviation security entities to conduct thorough security assessments of their systems to identify and remediate potential vulnerabilities. Implementing secure coding practices, conducting regular penetration testing, and providing comprehensive cybersecurity training for staff can help mitigate the risks associated with SQL injection attacks and other common security threats. Additionally, establishing stringent access controls and implementing multi-factor authentication can enhance the overall security posture of airline crew verification systems.
The discovery of this vulnerability underscores the critical importance of maintaining robust cybersecurity measures within aviation systems to safeguard against unauthorized access and malicious exploitation. By addressing these vulnerabilities proactively and implementing effective security controls, aviation entities can effectively mitigate the risks posed by cyber threats and protect the integrity of their operations.
Leave a Reply