It’s kind of scary… I just setup an account with JodoHost again, as I’ve been inactive for some time. I am having a problem getting a directory to communicate with my software code, so I created a support ticket from H-Sphere. After being transfered to Cerberus Helpdesk I logged in using my email address and password, and created the ticket. Once I was done I decided to view the ticket history and realized that I have tickets on my account history from someone else. They are regarding a domain name that I do not own, nor have I ever owned. I have complete ticket history with another clients user name and passwords, database details, etc…
This is really scary, after seeing this I think I’m going to cancel my account again. It seems this Helpdesk program has some kind of major bug, and I can only imagine who is reading all my security details that I just included in my ticket. I’m assuming that the person owning this account once had my email address, deleted it, or stopped using it. Now I registered the email address and I am logging in with it, and now seeing all of their account details.
After looking again I recommend that Cerberus be taken down until this is resolved. I am now getting access to dozens of tickets. I’m not going to take the time to go through all of these, but I wrote down about 20-30 ticket numbers which I have access to, that are NOT mine.
I think it would be a good idea to have a supervisor contact me via private message, and I can provide them with this list of ticket numbers that I’m looking at, so they can start investigating this issue ASAP!
Nice, well now that I’ve got this customers User ID, Domain Name, Account ID, and Password, what am I going to do with it?
I’m contacting Live Chat. I’m going to direct them to this thread. We need to get Cerberus taken down.
Edit: Since I have all their contact information, I’m going to be emailing this customer to inform this of this issue. I think they need to know that I’m having full access to their account. They need to get their account details changed now, there’s no telling how many other people are seeing this same information. This is my own personal computer at home, so there’s no way that someone just forgot to log out.
I have just got off live chat with arijeet and was told that the issue is being looked into, and will be fixed shortly. I sent him all the screen shots and a list of ticket numbers I am having access too.
I would still live someone to send me a private message, or email and let me know what the end result of this is. I need to make sure that my information is going to be safe before I continue with your company.
this happens when there are the same user on cluster1 and 2 sometimes, and only then.
due to continual problems with cerberus (not like this but just in general with their licensing means) we are worknig to move off to another app but have to develop the anonymous support addon for it ourselves.
I don’t want to seem like a jurk… but what the hell? It should NEVER happen. I should never receive another customers security details in my ticket history for any reason… EVER!! I could log into his account right now, and do anything I wanted with it. If he didn’t change his FTP password since he created his account, I can get onto FTP and take over everything.
I guess your very lucky that I’m the type of person to report this issue, and not take advantage of it.
Edit: Well anyway, I guess I don’t know what to say about it. It just really scares me that someone could be looking at my login details right now. How do I know that this other customer (James) is not looking at my login information?
Well its the next day and I am still able to view this other customers information…
H-Sphere and Cerberus are too buggy, when are you going to be dumping them and moving on to real hosting programs?
Please let me know so that I may continue with my website after the change has been completed. Right now I’m going to be taking everything back down again. There are so many issues with these hosting programs its not even funny.
OK. In the mean time I’m still keeping my account here, but I wont be using the ticket system until I know its fixed. So I’ll only be using Live Chat even if they ask me to make a ticket. Because I’m sure other people might be able to see my login details as well.
I was looking for another host but its hard to find some now days that are any good.
For the most part JodoHost has been a good host, but the software like H-Sphere and the ticket program are crap.
What about using HELM instead of H-Sphere. A lot of host are using that. Maybe its only for VPS/Dedicated I don’t know.
Can you please update the thread when its fixed so I can check my ticket program again, so make sure its gone.
