Karros Technologies Authentication Bypass

Researchers within Tenable have discovered security-related issues regarding the email verification process used by Karrostech’s hosted services. Karrostech (aka Karros Technologies) is a fleet management provider for student transportation systems and services.

While reviewing issues discovered in Edulog (https://tenable.com/security/research/tra-2023-41), Tenable researchers discovered a bypass to the email verification process in place that allowed access to portions of Karrostech’s infrastructure. This bypass ultimately allowed researchers to access potentially sensitive information and access internal administrative dashboards. …

authentication authentication bypass bypass technologies