{"id":38164,"date":"2019-10-31T22:22:00","date_gmt":"2019-10-31T19:22:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-lastpass-ustranena-uyazvimost-kotoraya-mogla-privesti-k-utechke-dannyh\/"},"modified":"2019-10-31T22:22:00","modified_gmt":"2019-10-31T19:22:00","slug":"v-lastpass-ustranena-uyazvimost-kotoraya-mogla-privesti-k-utechke-dannyh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/v-lastpass-ustranena-uyazvimost-kotoraya-mogla-privesti-k-utechke-dannyh","title":{"rendered":"V LastPass byla odstran\u011bna zranitelnost, kter\u00e1 mohla v\u00e9st k \u00faniku dat","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Minul\u00fd t\u00fdden v\u00fdvoj\u00e1\u0159i popul\u00e1rn\u00edho spr\u00e1vce hesel LastPass vydali aktualizaci, kter\u00e1 odstra\u0148uje zranitelnost, je\u017e mohla v\u00e9st k \u00faniku u\u017eivatelsk\u00fdch dat. O probl\u00e9mu bylo ozn\u00e1meno po jeho vy\u0159e\u0161en\u00ed a u\u017eivatel\u016fm LastPass bylo doporu\u010deno aktualizovat spr\u00e1vce hesel na posledn\u00ed verzi.<\/p>\n

Jedn\u00e1 se o zranitelnost, pomoc\u00ed kter\u00e9 mohli \u00fato\u010dn\u00edci ukr\u00e1st data zadan\u00e1 u\u017eivateli na posledn\u00ed nav\u0161t\u00edven\u00e9 webov\u00e9 str\u00e1nce. Probl\u00e9m byl odhalen minul\u00fd m\u011bs\u00edc Tavisem Ormandym, \u010dlenem projektu Google Project Zero, kter\u00fd se v\u011bnuje v\u00fdzkumu v oblasti informa\u010dn\u00ed bezpe\u010dnosti.  <\/p>\n

\"V<\/p>\n

V sou\u010dasnosti je LastPass nejpopul\u00e1rn\u011bj\u0161\u00edm spr\u00e1vcem hesel. V\u00fdvoj\u00e1\u0159i odstranili zm\u00edn\u011bnou zranitelnost ve verzi 4.33.0, kter\u00e1 byla zve\u0159ejn\u011bna 12. z\u00e1\u0159\u00ed. Pokud u\u017eivatel\u00e9 nevyu\u017e\u00edvaj\u00ed funkci automatick\u00e9ho aktualizov\u00e1n\u00ed LastPass, doporu\u010duje se st\u00e1hnout si aktu\u00e1ln\u00ed verzi softwaru ru\u010dn\u011b. Je pot\u0159eba to ud\u011blat co nejd\u0159\u00edve, proto\u017ee po oprav\u011b zranitelnosti byly publikov\u00e1ny jej\u00ed podrobnosti, kter\u00e9 mohou b\u00fdt zneu\u017eity \u00fato\u010dn\u00edky k kr\u00e1de\u017ei hesel z za\u0159\u00edzen\u00ed, na kter\u00fdch aplikace je\u0161t\u011b nebyla aktualizov\u00e1na.<\/p>\n

Exploatace zranitelnosti je spojena s prov\u00e1d\u011bn\u00edm \u0161kodliv\u00e9ho k\u00f3du JavaScript na c\u00edlov\u00e9m za\u0159\u00edzen\u00ed, bez jak\u00e9hokoli interakce s u\u017eivateli. \u00dato\u010dn\u00edci mohou l\u00e1kat u\u017eivatele na \u0161kodliv\u00e9 str\u00e1nky s c\u00edlem odcizit p\u0159ihla\u0161ovac\u00ed \u00fadaje ulo\u017een\u00e9 ve spr\u00e1vci hesel. Tavis Ormandy se domn\u00edv\u00e1, \u017ee zranitelnost je dost snadno zneu\u017eiteln\u00e1, proto\u017ee \u00fato\u010dn\u00edci mohou zamaskovat \u0161kodliv\u00fd odkaz a klamat u\u017eivatele, aby na n\u011bj klikli, \u010d\u00edm\u017e z\u00edskaj\u00ed p\u0159ihla\u0161ovac\u00ed \u00fadaje, kter\u00e9 byly zad\u00e1ny na p\u0159edchoz\u00ed str\u00e1nce.<\/p>\n

<\/center><\/p>\n

Z\u00e1stupci LastPass situaci nekomentuj\u00ed. V tuto chv\u00edli nejsou zn\u00e1my \u017e\u00e1dn\u00e9 p\u0159\u00edpady, kdy byla tato zranitelnost zneu\u017eita \u00fato\u010dn\u00edky.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Zdroj: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 LastPass \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0431\u044b\u043b\u043e \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u043e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0430, \u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c LastPass \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u0432\u0435\u0434\u0451\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u043f\u043e\u0441\u0435\u0449\u0451\u043d\u043d\u043e\u043c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0435. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28649,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38164","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ve LastPass byla odstran\u011bna zranitelnost, kter\u00e1 mohla v\u00e9st k \u00faniku dat | ProHoster","description":"Minul\u00fd t\u00fdden v\u00fdvoj\u00e1\u0159i popul\u00e1rn\u00edho spr\u00e1vce hesel LastPass vydali aktualizaci, kter\u00e1 odstra\u0148uje zranitelnost, je\u017e mohla v\u00e9st k \u00faniku u\u017eivatelsk\u00fdch dat.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-lastpass-ustranena-uyazvimost-kotoraya-mogla-privesti-k-utechke-dannyh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 LastPass \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 | ProHoster","og:description":"\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 LastPass \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-lastpass-ustranena-uyazvimost-kotoraya-mogla-privesti-k-utechke-dannyh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:22:00+00:00","article:modified_time":"2019-10-31T19:22:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38164","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:44:34","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:04:09","updated":"2026-01-23 20:44:34","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/38164","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=38164"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/38164\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/28649"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=38164"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=38164"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=38164"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}