CERT-In flags Tata Motors iRA app risks of data theft
In short
CERT-In said Tata Motors’ iRA apps could let attackers steal data, pretend to be users, or change app data without permission.
The report warns of a security risk for app users and Tata Motors.
What the reporting says
CERT-In identified vulnerabilities in Tata Motors’ iRA apps that could allow unauthorised access to sensitive information, user impersonation, and unauthorised modification of application data. The issue is primarily a cybersecurity risk for users of the apps and for Tata Motors’ digital systems.
Why it matters
CERT-In’s assessment of Tata Motors’ iRA apps points to risks of unauthorised access to sensitive information, user impersonation and unauthorised modification of application data. The immediate impact is reputational and operational risk rather than a confirmed loss event.