Lyons Estates

Estate agent website registration and tenant maintenance requests via insecure connection

http://www.lyonsestates.co.uk/register.aspx

http://www.lyonsestates.co.uk/login.aspx

http://webutils.acquaintcrm.co.uk/maintenancerequests.aspx?siteprefix=LYON

What is the problem?

Personal, contact, and address details collected via unencrypted form. Also, a tenant maintenance request system collects personal info and photos via an unencrypted form.

Disclosure Policy

Prior to public disclosure, notification about any privacy or security issues discovered were sent by email to the operator of this website on 4th August 2018, using either an email address publicly discoverable on the site, or the RFC 2142 standards compliant address "webmaster@..." if no public email address was provided.

At time of posting the issue had not yet been resolved.