UK COMPANIES HOUSE WEB GLITCH EXPOSES CORPORATE DETAILS TO FRAUDSTERS

Summary from the TLDR InfoSec newsletter

The UK's Companies House, the agency responsible for incorporating and dissolving the nation's listed companies, has taken its WebFiling dashboard down due to a vulnerability. The vulnerability allowed a user to access other companies' dashboards by selecting “file for another company” and repeatedly pressing the “back” key when prompted for an authentication code, which would redirect them to the other company's dashboard. Attackers could exploit this to view and edit information belonging to other companies.