Cybersecurity Flaw Discovered in CBSE Results 2024 Website: Student Data at Risk
The Central Board of Secondary Education (CBSE) in India faced a major cybersecurity flaw as it released the CBSE results 2024 for class 10th and 12th examinations. The vulnerability, discovered by The Cyber Express, could potentially allow unauthorized individuals to access and alter students’ examination results.
With over 3.8 million students appearing for the exams, the flaw on the CBSE website was identified early this morning, posing a significant risk of a massive data leak. The flaw was related to the exposure of administrative credentials and a technical misconfiguration in the SQL database system, specifically within a stored procedure called ‘Getcbse10_All_2024’.
The error message displayed on the website revealed critical connection string details, including the server IP address and database credentials, which could potentially grant unauthorized access to the database. While the threat potential is somewhat mitigated by incomplete information disclosure, the exposed ID and password could still be exploited if the correct server address is discovered.
The exposure of such critical credentials poses several risks, including unauthorized access and control, data manipulation, data theft, operational disruption, and the foundation for further attacks. Immediate steps should be taken to secure the database, change credentials, review logs for unauthorized access, and implement better security practices.
The CBSE, a prominent national education board in India, oversees public and private schools and administers crucial examinations for students. The Cyber Express has contacted CBSE officials to notify them of the vulnerability and is awaiting a response on the steps they intend to take to address the issue. Stay tuned for updates on this developing story.
