6 findings
As of 9 Oct 2026
As of 9 Oct 2026
Filtered byApplication: Meridian Customer Portal ✕
| Finding | Observation | Control | Applications | Severity | Status | Owner | Action | Validation |
|---|---|---|---|---|---|---|---|---|
| F-RBI-03 | Payment provider incident — incomplete credential rotation | VEN-03 | PayGate Payment Gateway, Meridian Customer Portal | High | In Progress | Deepa Menon | REM-F-RBI-03 · In Progress | Pending |
| F-RBI-04 | Credit line activated before KYC completion (KYC MD §16) | KYC-01 | Meridian Customer Portal, Salesforce (Sales + Financial Services Cloud) | High | Open | Arjun Kapoor | REM-F-RBI-04 · In Progress | Pending |
| F-IAQ2-PAY-01 | Bulk payout API accepted requests without customer 2FA | PAY-01 | PayGate Payment Gateway, Meridian Customer Portal | High | Closed | Deepa Menon | REM-F-IAQ2-PAY-01 · Closed | Validated |
| F-IAQ2-CHG-01 | Portal changes merged without second reviewer | CHG-01 | GitHub Enterprise Cloud, Meridian Customer Portal | Medium | Closed | Aditya Singh | REM-F-IAQ2-CHG-01 · Closed | Validated |
| F-IAQ2-KYC-01 | KYC document checks performed after account activation | KYC-01 | Meridian Customer Portal, Salesforce (Sales + Financial Services Cloud) | Medium | Closed | Arjun Kapoor | REM-F-IAQ2-KYC-01 · Closed | Failed |
| F-IAQ2-LOG-01 | Customer portal not onboarded to the SIEM | LOG-01 | Amazon Web Services (ap-south-1), Microsoft Entra ID, Meridian Customer Portal | Medium | Closed | Ananya Rao | REM-F-IAQ2-LOG-01 · Closed | Validated |