{"id":33578,"date":"2019-10-31T21:53:23","date_gmt":"2019-10-31T18:53:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vse-vashi-analizy-v-otkrytom-dostupe\/"},"modified":"2019-10-31T21:53:23","modified_gmt":"2019-10-31T18:53:23","slug":"vse-vashi-analizy-v-otkrytom-dostupe","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/vse-vashi-analizy-v-otkrytom-dostupe","title":{"rendered":"Alle dine analyser er offentligt tilg\u00e6ngelige","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Hej igen! Jeg har igen fundet en offentlig database med medicinske data til dig. Jeg minder om, at jeg for nylig havde tre artikler om dette emne: l\u00e6kage af personlige oplysninger om patienter og l\u00e6ger fra den medicinske online-service DOC+<\/a><\/noindex>, s\u00e5rbarhed i tjenesten \"L\u00e6ge i n\u00e6rheden\"<\/a><\/noindex> og l\u00e6kage af data fra ambulancestationer<\/a><\/noindex>.<\/p>\n

<\/p>\n

\"Alle<\/p>\n

<\/p>\n

Denne gang er en Elasticsearch-server med logger fra det medicinske IT-system i laboratorie-netv\u00e6rket \"Centrala for molekyl\u00e6rdiagnostik<\/em>\" (CMD, www.cmd-online.ru).<\/p>\n

<\/a><\/noindex><\/p>\n

Ansvarsfraskrivelse: al information nedenfor udgives kun til uddannelsesm\u00e6ssige form\u00e5l. Forfatteren har ikke f\u00e5et adgang til personlige data om tredjeparter og virksomheder. Oplysningerne er enten hentet fra offentlige kilder eller blevet givet til forfatteren af anonyme velvillige personer.<\/code><\/p>\n

<\/p>\n

Serveren blev opdaget den 1. april om morgenen, og det syntes jeg slet ikke var sjovt. Notifikationen om problemet blev sendt til CMD cirka kl. 10 om morgenen (MSK), og omkring kl. 15 blev databasen utilg\u00e6ngelig. <\/p>\n

<\/p>\n

If\u00f8lge s\u00f8gemaskinen Shodan blev denne server f\u00f8rst offentliggjort den 09.03.2019. Om hvordan man opfinder \u00e5bne Elasticsearch-databaser<\/a><\/noindex>, har jeg skrevet en separat artikel.<\/p>\n

<\/p>\n

Fra loggene kunne man f\u00e5 meget f\u00f8lsomme oplysninger, herunder navn, k\u00f8n, f\u00f8dselsdatoer for patienter, navne p\u00e5 l\u00e6ger, omkostninger ved unders\u00f8gelser, data om unders\u00f8gelser, filer med screeningsresultater<\/strong> og meget mere.<\/p>\n

<\/p>\n

Eksempel p\u00e5 log med resultaterne af en patients analyser:<\/p>\n

<\/p>\n

\"Pas0423BF97FA5E-1DWW98675708386841791018.03.2019\u0420\u041e\u0421\u0421 RU.13\u0421\u041a03.006012iVBORw0KGgoAAAANSUhEUgAABfoAAAfuCAIAAAArOR8rAAD\/\/0lEQVR4Xuy9P7BtQ7u+\/e3oECF6iRAhQoQI0SZCtIkQIdpEiBCxI0SIECFiV50qRKg6VYgQIUKEiDfiRL7rnPtXz+nqHnPMsfb6s+cc61rBqjl79Oh++uoe\/eceT\/c8888\/\/\/<\/code><\/pre>\n
<\/p>\n
Jeg har skjult alle f\u00f8lsomme data med tegnene 'X'. I virkeligheden blev alt opbevaret \u00e5bent.<\/em><\/p>\n
<\/p>\n
Fra s\u00e5danne logs kunne man let (ved at dekode fra Base64) f\u00e5 PNG-filer med screeningsresultaterne, allerede i en l\u00e6sevenlig form:<\/p>\n
<\/p>\n
\"Alle <\/p>\n
<\/p>\n
Den samlede st\u00f8rrelse af logfilerne oversteg 400 MB, og de indeholdt samlet set over en million poster. Det st\u00e5r klart, at ikke hver post indeholdt data fra en unik patient.<\/p>\n
<\/p>\n
Officiel svar fra CMD: <\/p>\n
<\/p>\n
Vi vil gerne takke dig for hurtigt at have sendt informationen om s\u00e5rbarheden i lognings- og fejlh\u00e5ndteringsdatabasen Elasticsearch den 01.04.2019. <\/p>\n
Baseret p\u00e5 denne information har vores medarbejdere i samarbejde med relevante specialister begr\u00e6nset adgangen til den n\u00e6vnte database. Fejlen vedr\u00f8rende overf\u00f8rsel af fortrolige oplysninger til den tekniske database er blevet rettet.<\/p>\n
Ved gennemgangen af h\u00e6ndelsen blev det klarlagt, at tilg\u00e6ngeligheden af den n\u00e6vnte database med fejl-logs offentligt skete som f\u00f8lge af menneskelige faktorer. Adgangen til dataene blev hurtigt lukket den 01.04.2019. <\/p>\n
I \u00f8jeblikket udf\u00f8res der tiltag af b\u00e5de interne og eksterne specialister for at udf\u00f8re en yderligere revision af IT-infrastrukturen med fokus p\u00e5 databeskyttelse. <\/p>\n
Vores organisation har udviklet en s\u00e6rlig procedure for arbejde med persondata og et system for niveauansvar blandt medarbejderne. <\/p>\n
Den nuv\u00e6rende softwareinfrastruktur foruds\u00e6tter brugen af Elasticsearch-databasen til opbevaring af fejl. For at forbedre p\u00e5lideligheden af nogle systemer vil der blive udf\u00f8rt en migration af de relevante servere til vores partners datacenter, i et certificeret software-hardware milj\u00f8. <\/p>\n
Tak for den rettidige information, du har givet.<\/p><\/blockquote>\n
Nyheder om informationsl\u00e6kager og insidere kan altid findes p\u00e5 min Telegram-kanal \"Informationsl\u00e6kager<\/a><\/noindex>\u00bb.<\/p>\n
Kilde: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0418 \u0441\u043d\u043e\u0432\u0430 \u0437\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435! \u0423 \u043c\u0435\u043d\u044f \u043e\u043f\u044f\u0442\u044c \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u0430\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u0430\u044f \u0431\u0430\u0437\u0430 \u0441 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438. \u041d\u0430\u043f\u043e\u043c\u043d\u044e, \u0447\u0442\u043e \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0442\u0443\u0442 \u0431\u044b\u043b\u043e \u0442\u0440\u0438 \u043c\u043e\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u0438 \u043d\u0430 \u044d\u0442\u0443 \u0442\u0435\u043c\u0443: \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0446\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u0432\u0440\u0430\u0447\u0435\u0439 \u0438\u0437 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u043d\u043b\u0430\u0439\u043d-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 DOC+, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u00ab\u0414\u043e\u043a\u0442\u043e\u0440 \u0440\u044f\u0434\u043e\u043c\u00bb \u0438 \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439 \u0441\u043a\u043e\u0440\u043e\u0439 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043e\u043c\u043e\u0449\u0438. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0441\u0435\u0440\u0432\u0435\u0440 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25272,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33578","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Alle dine analyser i \u00e5ben adgang | ProHoster","description":"Og hej igen! Jeg har endnu engang fundet en \u00e5ben database med medicinske data til dig.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/vse-vashi-analizy-v-otkrytom-dostupe","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0441\u0435 \u0432\u0430\u0448\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u044b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 | ProHoster","og:description":"\u0418 \u0441\u043d\u043e\u0432\u0430 \u0437\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435! \u0423 \u043c\u0435\u043d\u044f \u043e\u043f\u044f\u0442\u044c \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u0430\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u0430\u044f \u0431\u0430\u0437\u0430 \u0441 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438.","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/vse-vashi-analizy-v-otkrytom-dostupe","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:23+00:00","article:modified_time":"2019-10-31T18:53:23+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33578","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:51:39","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:38:09","updated":"2026-01-21 15:51:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/33578","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=33578"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/33578\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/25272"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=33578"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=33578"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=33578"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}