{"id":55464,"date":"2020-01-21T00:00:00","date_gmt":"2020-01-20T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli"},"modified":"2020-02-18T14:03:35","modified_gmt":"2020-02-18T11:03:35","slug":"kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli","title":{"rendered":"Hvordan den kritiske s\u00e5rbarhed i Citrix NetScaler CVE-2019-19781 afsl\u00f8rede skjulte problemer i IT-branchen","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>K\u00e6re l\u00e6ser, f\u00f8rst og fremmest vil jeg gerne pointere, at jeg som bosiddende i Tyskland beskriver situationen i dette land. M\u00e5ske er situationen radikalt anderledes i dit land.<\/p>\n<p>Den 17. december 2019 blev der offentliggjort oplysninger p\u00e5 Citrix Knowledge Center om en kritisk s\u00e5rbarhed i produktlinjerne Citrix Application Delivery Controller (NetScaler ADC) og Citrix Gateway, kendt af folk som NetScaler Gateway. <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex>S\u00e5rbarheden blev senere ogs\u00e5 fundet i SD-WAN-linjen. S\u00e5rbarheden p\u00e5virkede alle versioner af produkterne fra 10.5 til den aktuelle 13.0 og tillod en uautoriseret angriber at udf\u00f8re skadelig kode i systemet, hvilket praktisk talt omdannede NetScaler til en platform for videre angreb p\u00e5 det interne netv\u00e6rk.<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/support.citrix.com\/article\/CTX267027\">CTX267027: CVE-2019-19781 \u2014 S\u00e5rbarhed i Citrix Application Delivery Controller<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/support.citrix.com\/article\/CTX267679\">CTX267679: Tiltag for at mindske risikoen for CVE-2019-19781<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/support.citrix.com\/article\/CTX269180\">CTX269180: CVE-2019-19781 \u2013 Verifikation v\u00e6rkt\u00f8j (Offentliggjort 15.01.2020!)<\/a><\/noindex><\/li>\n<\/ul>\n<p>\nSamtidigt med offentligg\u00f8relsen af oplysningerne om s\u00e5rbarheden offentliggjorde Citrix anbefalinger til reduktion af risikoen (Workaround). Den fulde lukning af s\u00e5rbarheden blev lovet f\u00f8rst ved udgangen af januar 2020.<\/p>\n<p>Kritikaliteten af denne s\u00e5rbarhed (CVE-2019-19781) blev <noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-19781\">vurderet til 9.8 ud af 10<\/a><\/noindex>. If\u00f8lge <noindex><a rel=\"nofollow\" href=\"https:\/\/www.ptsecurity.com\/ru-ru\/about\/news\/obnaruzhena-uyazvimost-v-po-citrix-pozvolyayushchaya-proniknut-v-seti-80-000-kompaniy\/\">oplysninger fra Positive Technologies<\/a><\/noindex> ber\u00f8rer s\u00e5rbarheden mere end 80.000 virksomheder verden over.<\/p>\n<h3>Mulig reaktion p\u00e5 nyheden<\/h3>\n<p>\nSom en ansvarlig person troede jeg, at alle IT-specialister med NetScaler-produkter i deres infrastruktur ville handle som f\u00f8lger:<\/p>\n<ol>\n<li>hurtigt implementere alle de anbefalinger n\u00e6vnt i artiklen CTX267679 for at mindske risikoen.<\/li>\n<li>genkontrollere Firewall-indstillingerne med henblik p\u00e5 tilladt trafik fra NetScaler til det interne netv\u00e6rk.<\/li>\n<li>anbefale IT-sikkerhedsadministratorer at v\u00e6re opm\u00e6rksomme p\u00e5 \"us\u00e6dvanlige\" fors\u00f8g p\u00e5 adgang til NetScaler og, hvis n\u00f8dvendigt, blokere dem. Jeg minder om, at NetScaler normalt ligger i DMZ.<\/li>\n<li>vurdere muligheden for midlertidigt at frakoble NetScaler fra netv\u00e6rket, indtil der er mere detaljerede oplysninger om problemet. I l\u00f8bet af f\u00f8rjulens ferie, helligdage osv. ville det ikke v\u00e6re s\u00e5 smertefuldt. Derudover har mange virksomheder en alternativ adgang gennem VPN.<\/li>\n<\/ol>\n<p><\/p>\n<h3>Hvad skete der s\u00e5 derefter?<\/h3>\n<p>\nDesv\u00e6rre viser det sig senere, at de ovenfor beskrevne skridt, som er en standard tilgang, blev ignoreret af de fleste. <\/p>\n<p>Mange af de ansvarlige for Citrix-infrastrukturen blev f\u00f8rst opm\u00e6rksomme p\u00e5 s\u00e5rbarheden den 13.01.2020. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.tagesschau.de\/investigativ\/swr\/citrix-sicherheitsluecke-101.html\">fra de centrale nyheder.<\/a><\/noindex>. De fandt f\u00f8rst ud af det, da et stort antal systemer under deres ansvar var blevet kompromitteret. Absurditeten i situationen var s\u00e5dan, at de n\u00f8dvendige exploits kunne downloades ganske <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/projectzeroindia\/CVE-2019-19781\">lovligt fra internettet.<\/a><\/noindex>.<br \/>\nJeg troede af en eller anden grund, at IT-specialister l\u00e6ser nyhedsbreve fra producenterne af de systemer, de er ansvarlige for, kan bruge Twitter, er tilmeldt f\u00f8rende specialister inden for deres omr\u00e5de og skal v\u00e6re opdateret om aktuelle begivenheder.<\/p>\n<p>Faktisk ignorerede mange Citrix-kunder fuldst\u00e6ndigt producentens anbefalinger i over tre uger. Og kunderne hos Citrix omfatter stort set alle store og mellemstore virksomheder i Tyskland samt n\u00e6sten alle statslige institutioner. F\u00f8rst og fremmest ber\u00f8rte s\u00e5rbarheden netop de offentlige strukturer.<\/p>\n<h3>Men der er noget at tage sig til.<\/h3>\n<p>\nFor dem hvis systemer blev kompromitteret er en total geninstallation n\u00f8dvendig, inklusive udskiftning af TSL-certifikater. Det er muligt, at de Citrix-kunder, som havde forventet mere aktive handlinger fra producenten vedr\u00f8rende afhj\u00e6lpning af den kritiske s\u00e5rbarhed, seri\u00f8st vil begynde at lede efter alternativer. Man m\u00e5 erkende, at Citrix' reaktion ikke giver grund til optimism.<\/p>\n<h3>Der er flere sp\u00f8rgsm\u00e5l end svar.<\/h3>\n<p>\nDer opst\u00e5r et sp\u00f8rgsm\u00e5l: hvad har de mange partnere til Citrix, b\u00e5de platin- og guldpartnere, lavet? Hvorfor kom de n\u00f8dvendige informationer f\u00f8rst frem p\u00e5 nogle partneres sider i den 3. uge af 2020? Det er \u00e5benlyst, at selv de h\u00f8jt betalte eksterne konsulenter ogs\u00e5 sov i denne farlige situation. Jeg \u00f8nsker ikke at s\u00e5re nogen, men partnerens opgave ligger i f\u00f8rste omgang i at forebygge problemer, ikke blot at tilbyde = s\u00e6lge hj\u00e6lp til at l\u00f8se dem.<\/p>\n<p>Faktisk har denne situation vist det reelle status quo inden for IT-sikkerhed. B\u00e5de ansatte i IT-afdelingerne i virksomheder og konsulenter fra Citrix-partnere b\u00f8r forst\u00e5 en sandhed: hvis der er en s\u00e5rbarhed, skal den rettes. Og en kritisk s\u00e5rbarhed skal rettes straks!<br \/>\n<br \/>Kilde: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/484548\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0440\u043e\u0433\u043e\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0447\u0438 \u0436\u0438\u0442\u0435\u043b\u0435\u043c \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u044f \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0432 \u0432\u0430\u0448\u0435\u0439 \u0441\u0442\u0440\u0430\u043d\u0435 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043a\u0430\u0440\u0434\u0438\u043d\u0430\u043b\u044c\u043d\u043e \u0438\u043d\u0430\u044f. 17 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2019 \u0433\u043e\u0434\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 Citrix Knowledge Center \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0430\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Citrix Application Delivery Controller (NetScaler ADC) \u0438 Citrix Gateway, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55464","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0414\u043e\u0440\u043e\u0433\u043e\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0447\u0438 \u0436\u0438\u0442\u0435\u043b\u0435\u043c \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u044f \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Citrix NetScaler CVE-2019-19781 \u043e\u0431\u043d\u0430\u0436\u0438\u043b\u0430 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b IT-\u043e\u0442\u0440\u0430\u0441\u043b\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0414\u043e\u0440\u043e\u0433\u043e\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0447\u0438 \u0436\u0438\u0442\u0435\u043b\u0435\u043c \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u044f \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-20T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hvordan den kritiske s\u00e5rbarhed Citrix NetScaler CVE-2019-19781 afsl\u00f8rede skjulte problemer i IT-branchen | ProHoster","description":"K\u00e6re l\u00e6ser, f\u00f8rst og fremmest vil jeg p\u00e5pege, at jeg som bosiddende i Tyskland prim\u00e6rt beskriver situationen i dette land.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Citrix NetScaler CVE-2019-19781 \u043e\u0431\u043d\u0430\u0436\u0438\u043b\u0430 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b IT-\u043e\u0442\u0440\u0430\u0441\u043b\u0438 | ProHoster","og:description":"\u0414\u043e\u0440\u043e\u0433\u043e\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0447\u0438 \u0436\u0438\u0442\u0435\u043b\u0435\u043c \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u044f \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435.","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-20T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55464","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:43:31","updated":"2022-09-28 09:07:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/55464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=55464"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/55464\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=55464"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=55464"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=55464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}