Vulnerability resides in widely used online flight booking system developed by Amadeus. Israeli network security researcher Noam Rotem discovered vulnerability when he booked a flight on the Israeli airline ELAL. The vulnerability could have affected hundreds of millions of travelers around the world. An attacker can simply access the victim’s account on ELAL’s customer portal and “make changes, claim frequent flyer miles to a personal account, assign seats and meals, and update the customer’s email and phone number,” Rotem said.
Source: https://thehackernews.com/2019/01/airlines-flight-hacking.html