{"id":33578,"date":"2019-10-31T21:53:23","date_gmt":"2019-10-31T18:53:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vse-vashi-analizy-v-otkrytom-dostupe\/"},"modified":"2019-10-31T21:53:23","modified_gmt":"2019-10-31T18:53:23","slug":"vse-vashi-analizy-v-otkrytom-dostupe","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/vse-vashi-analizy-v-otkrytom-dostupe","title":{"rendered":"K\u00f5ik teie anal\u00fc\u00fcsid on avalikus juurdep\u00e4\u00e4sus","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tere taas! Mul on j\u00e4lle teie jaoks avatud baas meditsiiniliste andmete kogumisega. Tuletan meelde, et just hiljuti ilmus siia kolm minu artiklit sellel teemal: andmete lekke kohta patsientide ja arstide isikuandmetest meditsiinilisest veebiteenusest DOC+<\/a><\/noindex>, teenuse \u201eDoktor k\u00f5rval\u201c haavatavusest<\/a><\/noindex> ja kiirabiandmete lekke kohta<\/a><\/noindex>.<\/p>\n

<\/p>\n

\"K\u00f5ik<\/p>\n

<\/p>\n

Seekord sattus avatud ligip\u00e4\u00e4suga serverisse Elasticsearch meditsiinilise IT-s\u00fcsteemi logid laborite v\u00f5rgustikule \u201eMolekulaarse diagnostika keskus<\/em>\u201c (CMD, www.cmd-online.ru).<\/p>\n

<\/a><\/noindex><\/p>\n

Distsipliin: kogu allpool olev teave avaldatakse ainult hariduslikel eesm\u00e4rkidel. Autor ei ole saanud juurdep\u00e4\u00e4su kolmandate isikute ja ettev\u00f5tete isikuandmetele. Teave on saadud kas avatud allikatest v\u00f5i on autori k\u00e4es anon\u00fc\u00fcmsete headest soovidest.<\/code><\/p>\n

<\/p>\n

Server avastati 1. aprill hommikul ja see ei tundunud mulle sugugi naljakas. Probleemist teavitamine saadeti CMD-le umbes kell 10 hommikul (MSK) ja umbes kell 15.00 baas muutus k\u00e4ttesaamatuks. <\/p>\n

<\/p>\n

Otsingumootori Shodan andmetel p\u00e4\u00e4ses see server esmakordselt avatud ligip\u00e4\u00e4su 09.03.2019. Sellest, kuidas avastatakse avatud Elasticsearch andmebaasid<\/a><\/noindex>, olen kirjutanud eraldi artikli.<\/p>\n

<\/p>\n

Logidest oli v\u00f5imalik saada \u00fcsna tundlikku teavet, sealhulgas nime, soo, s\u00fcnnikuup\u00e4eva patsiendid, arstide nimed, uuringute maksumus, uuringuandmed, skriiningutulemuste failid<\/strong> ja palju muud.<\/p>\n

<\/p>\n

N\u00e4ide patsiendi anal\u00fc\u00fcsitulemustega logist:<\/p>\n

<\/p>\n

\"Pass0423BF97FA5E-1DWW98675708386841791018.03.2019\u0420\u041e\u0421\u0421 RU.13\u0421\u041a03.006012iVBORw0KGgoAAAANSUhEUgAABfoAAAfuCAIAAAArOR8rAAD\/\/0lEQVR4Xuy9P7BtQ7u+\/e3oECF6iRAhQoQI0SZCtIkQIdpEiBCxI0SIECFiV50qRKg6VYgQIUKEiDfiRL7rnPtXz+nqHnPMsfb6s+cc61rBqjl79Oh++uoe\/eceT\/c8888\/\/<\/code><\/pre>\n
<\/p>\n
Ma sisestasin k\u00f5ik tundlikud andmed s\u00fcmboliga \u201eX\u201c. Tegelikult oli k\u00f5ik salvestatud avatud kujul.<\/em><\/p>\n
<\/p>\n
Sellistest logidest oli lihtne (Base64-dekoodimise kaudu) saada PNG-faile skriinimise tulemustest, juba lugemiseks mugavas vormis:<\/p>\n
<\/p>\n
\"K\u00f5ik <\/p>\n
<\/p>\n
Logide kogumaht \u00fcletas 400 MB ja nende seas oli kokku rohkem kui miljon kirjet. On selge, et mitte iga kirje ei sisaldanud unikaalse patsiendi andmeid.<\/p>\n
<\/p>\n
CMD ametlik vastus: <\/p>\n
<\/p>\n
T\u00e4nu teile 01.04.2019. a edastatud kiire teabe eest andmebaasis esineva haavatavuse kohta, mis puudutab logimise ja vigade salvestamise Elasticsearchi s\u00fcsteemi. <\/p>\n
Selle teabe p\u00f5hjal piirati meie t\u00f6\u00f6tajate ja valdkonna spetsialistide koost\u00f6\u00f6s juurdep\u00e4\u00e4s nimetatud andmebaasile. Konfidentsiaalsete andmete edastamise viga tehnilises andmebaasis on parandatud.<\/p>\n
Juhtumi uurimise k\u00e4igus selgus, et nimetatud vigade logide andmebaasi avatud ligip\u00e4\u00e4s tekkis inimfaktoritega seotud p\u00f5hjuse t\u00f5ttu. Andmetele juurdep\u00e4\u00e4s suleti kiiresti 01.04.2019. <\/p>\n
Praegu viivad meie sisemised ja kaasatud v\u00e4list\u00f6\u00f6tajad l\u00e4bi lisakontrolli IT-infrastruktuuris andmete kaitse osas. <\/p>\n
Meie organisatsioon on v\u00e4lja t\u00f6\u00f6tanud spetsiaalse regulatsiooni isikuandmete t\u00f6\u00f6tlemiseks ja personali tasemete vastutuse s\u00fcsteemiks. <\/p>\n
Praegune tarkvarainfrastruktuur eeldab Elasticsearchi andmebaasi kasutamist vigade salvestamiseks. M\u00f5nede s\u00fcsteemide usaldusv\u00e4\u00e4rsuse t\u00f5stmiseks viiakse vastavad serverid meie partneri andmekeskusesse, sertifitseeritud tarkvara- ja riistvara keskkonda. <\/p>\n
T\u00e4nu teile \u00f5igeaegselt esitatud teabe eest.<\/p><\/blockquote>\n
Infot andmelekkete ja siseinfo kohta saab alati leida minu Telegrami kanalist \u201eAndmelekked<\/a><\/noindex>\u00bb.<\/p>\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0418 \u0441\u043d\u043e\u0432\u0430 \u0437\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435! \u0423 \u043c\u0435\u043d\u044f \u043e\u043f\u044f\u0442\u044c \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u0430\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u0430\u044f \u0431\u0430\u0437\u0430 \u0441 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438. \u041d\u0430\u043f\u043e\u043c\u043d\u044e, \u0447\u0442\u043e \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0442\u0443\u0442 \u0431\u044b\u043b\u043e \u0442\u0440\u0438 \u043c\u043e\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u0438 \u043d\u0430 \u044d\u0442\u0443 \u0442\u0435\u043c\u0443: \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0446\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u0432\u0440\u0430\u0447\u0435\u0439 \u0438\u0437 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u043d\u043b\u0430\u0439\u043d-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 DOC+, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u00ab\u0414\u043e\u043a\u0442\u043e\u0440 \u0440\u044f\u0434\u043e\u043c\u00bb \u0438 \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439 \u0441\u043a\u043e\u0440\u043e\u0439 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043e\u043c\u043e\u0449\u0438. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0441\u0435\u0440\u0432\u0435\u0440 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25272,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33578","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47K\u00f5ik teie anal\u00fc\u00fcsid on avatud juurdep\u00e4\u00e4suga | ProHoster","description":"Ja taas tere! Mul on j\u00e4lle teile avatud meditsiiniliste andmete andmebaas.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/vse-vashi-analizy-v-otkrytom-dostupe","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0441\u0435 \u0432\u0430\u0448\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u044b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 | ProHoster","og:description":"\u0418 \u0441\u043d\u043e\u0432\u0430 \u0437\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435! \u0423 \u043c\u0435\u043d\u044f \u043e\u043f\u044f\u0442\u044c \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u0430\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u0430\u044f \u0431\u0430\u0437\u0430 \u0441 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/vse-vashi-analizy-v-otkrytom-dostupe","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:23+00:00","article:modified_time":"2019-10-31T18:53:23+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33578","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:51:39","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:38:09","updated":"2026-01-21 15:51:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33578","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=33578"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33578\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/25272"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=33578"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=33578"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=33578"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}