Indian Railway Catering & Tourism Corporation [IRCTC] — Bug report

Hello team,

I am a bug bounty hunter. while searching for the endpoints in the https://irctc.com/ i found some endpoints names /assets/images/PDF in these endpoints i found some directories in which there were few pdf files in which one file named DepartmentChart(IRCTC-HRD).pdf contained the list of
HRD their email and their phone numbers of north zone, south zone, east zone, west zone and south central zone. This file can be accessed by anyone and can read the mobile number and email address of the HRD's . Please secure the endpoints as soon as possible because some other people may misuse the information provided in the endpoints and PDF's

Vulnerable address: https://www.irctc.com/assets/images/PDF/DepartmentChart(IRCTC-HRD).pdf

for further information you can contact me on glennmendonca.[protected]@gmail.com

thank you
regards,
Glenn
Was this information helpful?
No (0)
Yes (0)
Indian Railway Catering & Tourism Corporation [IRCTC] customer support has been notified about the posted complaint.
Complaint comments 

Post your Comment

    I want to submit Complaint Positive Review Neutral Comment
    code
    By clicking Submit you agree to our Terms of Use
    Submit
    Indian Railway Catering & Tourism Corporation [IRCTC]
    customer care contact
    Customer satisfaction rating Customer satisfaction rating is a complex algorithm that helps our users determine how good a company is at responding and resolving complaints by granting from 1 to 5 stars for each complaint and then ultimately combining them all for an overall score.
    Read more
    17%
    Complaints
    10798
    Pending
    0
    Resolved
    1834
    Indian Railway Catering & Tourism Corporation [IRCTC] Phone
    +91 44 2530 0000
    Indian Railway Catering & Tourism Corporation [IRCTC] Address
    9th Floor, Bank of Baroda Building, 16, Parliament Street, New Delhi, Delhi, India
    View all Indian Railway Catering & Tourism Corporation [IRCTC] contact information