Security ‘primary users’ DigiD lap deficit

The security of a number of sites that use DigiD lap deficit. What vulnerabilities exactly it went, would the ministry do not indicate. The Tax authorities, the UWV and the Studielink are ‘heavy consumers’ of DigiD.

In a letter to the Second Chamber writes to minister Plasterk of the Interior that the security of the ‘consumers’ of DigiD under the microscope is taken. It came ‘findings that give rise to measures for improvement on parts,” writes the minister. To what vulnerabilities it went, remains unmentioned, but it would not go to a ‘so serious and acute security risk that access to Digital had to be closed.

Large-scale usage of DigiD are, inter alia, the Tax and customs administration, with Studielink, the Sociale Verzekeringsbank, the UWV. In total six organisations, all of which are screened at security. The problems differed per organisation. “In the a there was nothing or almost nothing to the hand,” says spokesman Frank Wassenaar of the Dutch Ministry of the Interior. “And in the other there were a few hiccups.” In the meantime, the vulnerabilities according to the minister ‘arrested’. Or that means that they have already been fixed, is unclear.

Wassenaar may not indicate any problems in any organization have played, and whether certain organizations are absolutely no security issues. In addition, he wants not to indicate what vulnerabilities it went. “That’s why we do precisely because of the security, no communications about,” says Wassenaar. At the beginning of this year, the government DigiD yet as a precaution, offline, after a serious vulnerability in Ruby on Rails came along.