Liberty Bus Avanchicards

Bus company payment card login page with insecure links and page assets

https://shop.libertybus.je/ssp/jersey/account.jsp?productId=1#login

What is the problem?

Despite having encryption enabled for the primary domain, this page contains numerous issues such as many hard-coded http://... links in the page source, and legacy Adobe Flash content served from an insecure third-party domain.

Visiting this site with the Chrome web browser produces the following error message: “You should not enter any sensitive information on this site (for example, passwords or credit cards), because it could be stolen by attackers.”

Disclosure Policy

Prior to public disclosure, notification about any privacy or security issues discovered were sent by email to the operator of this website on 5th August 2018, using either an email address publicly discoverable on the site, or the RFC 2142 standards compliant address "webmaster@..." if no public email address was provided.

At time of posting the issue had not yet been resolved.