{"id":55464,"date":"2020-01-21T00:00:00","date_gmt":"2020-01-20T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli"},"modified":"2020-02-18T14:03:35","modified_gmt":"2020-02-18T11:03:35","slug":"kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli","title":{"rendered":"Kuidas kritiline haavatavus Citrix NetScaler CVE-2019-19781 paljastas peidetud probleemid IT-sektoris","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Lugupidamine, k\u00f5igepealt tahaksin m\u00e4rkida, et olles Saksamaa elanik, kirjeldan ma peamiselt olukorda selles riigis. V\u00f5ib-olla on teie riigis olukord kardinaalselt erinev.<\/p>\n<p>17. detsembril 2019 avaldati Citrix Knowledge Centeri lehek\u00fcljel teavet kriitilise haavatavuse kohta Citrixi rakenduste edastamise kontrolleri (NetScaler ADC) ja Citrix Gateway toodetes, mida tuntakse ka kui NetScaler Gateway. <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex>Hiljem leiti sama n\u00f5rkus ka SD-WAN tooteliinist. Haavatavus puudutas k\u00f5iki tooteversioone alates 10.5 kuni hetkeni 13.0 ja v\u00f5imaldas autoriseerimata r\u00fcndajal s\u00fcsteemis pahatahtlikku koodi k\u00e4ivitada, praktiliselt muutes NetScaler\u2019i sisemiste r\u00fcnnakute platvormiks.<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/support.citrix.com\/article\/CTX267027\">CTX267027: CVE-2019-19781 \u2014 Haavatavus Citrix Application Delivery Controlleris<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/support.citrix.com\/article\/CTX267679\">CTX267679: Riskide v\u00e4hendamise sammud CVE-2019-19781 jaoks<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/support.citrix.com\/article\/CTX269180\">CTX269180: CVE-2019-19781 \u2013 Kontrollimise t\u00f6\u00f6riist (Avaldatud 15.01.2020!)<\/a><\/noindex><\/li>\n<\/ul>\n<p>\nSamas, kui teave haavatavuse kohta avaldati, avaldas Citrix ka soovitused riski v\u00e4hendamiseks (Workaround). Haavatavuse t\u00e4ielikku sulgemist lubati alles 2020. aasta jaanuari l\u00f5puks.<\/p>\n<p>K\u00e4esoleva haavatavuse (CVE-2019-19781) kriitilisus oli <noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-19781\">hindatud 9.8 punktiks 10-st<\/a><\/noindex>. Vastavalt <noindex><a rel=\"nofollow\" href=\"https:\/\/www.ptsecurity.com\/ru-ru\/about\/news\/obnaruzhena-uyazvimost-v-po-citrix-pozvolyayushchaya-proniknut-v-seti-80-000-kompaniy\/\">Positive Technologies'i teabele<\/a><\/noindex> puudutab haavatavus \u00fcle 80 000 ettev\u00f5tte kogu maailmas.<\/p>\n<h3>V\u00f5imalik reaktsioon uudisele<\/h3>\n<p>\nOlles vastutustundlik inimene, arvasin, et k\u00f5ik IT-spetsialistid, kelle infrastruktuuris on NetScaler tooted, tegutsesid j\u00e4rgmiselt:<\/p>\n<ol>\n<li>rakendasid kohe k\u00f5iki CTX267679 artiklis m\u00e4rgitud riskimaandamise soovitusi.<\/li>\n<li>kontrollisid tulem\u00fc\u00fcri seadistusi, seoses lubatud liiklusega NetScaler\u2019ist sisev\u00f5rku.<\/li>\n<li>soovitasid IT-ohutuse administraatoritel t\u00e4helepanu p\u00f6\u00f6rata 'ebaharilikele' ligip\u00e4\u00e4su katsetele NetScaler\u2019ile ja vajadusel need blokeerida. Tuletan meelde, et NetScaler asub tavaliselt DMZ-is.<\/li>\n<li>hindasid v\u00f5imalust ajutiselt katkestada NetScaler\u2019i \u00fchendus v\u00f5rguga, kuni saadakse probleemist rohkem teavet. J\u00f5ulupuhkuste, koolivahede jms ajal ei oleks see nii valus. Lisaks on paljudel ettev\u00f5tetel alternatiivne v\u00f5imalus juurde p\u00e4\u00e4seda VPN-i kaudu.<\/li>\n<\/ol>\n<p><\/p>\n<h3>Mida edasi juhtus?<\/h3>\n<p>\nKahjuks, nagu edaspidi selgub, ignoreeris enamik eelmalt kirjeldatud samme, mis on standardne l\u00e4henemine. <\/p>\n<p>Paljud Citrix-infrastruktuuri spetsialistid said haavatavusest teada alles 13.01.2020. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.tagesschau.de\/investigativ\/swr\/citrix-sicherheitsluecke-101.html\">kesksetest uudistest<\/a><\/noindex>. Nad said teada just siis, kui suur hulk nende vastutusalasse kuuluvatest s\u00fcsteemidest oli kompromiteeritud. Situatsiooni absurdsus ulatus selleni, et vajalikud eksploidid olid t\u00e4iesti <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/projectzeroindia\/CVE-2019-19781\">legitiimselt Internetist allalaaditavad.<\/a><\/noindex>.<br \/>\nMa arvasin, et IT-spetsialistid loevad tootjate, nende usaldatud s\u00fcsteemide, uudiskirju, oskavad kasutada Twitterit, on tellinud juhtivate oma ala spetsialistide postitusi ja peavad olema kursis aktuaalsete s\u00fcndmustega.<\/p>\n<p>Tegelikult ignoreerisid mitmed Citrixi kliendid tootja soovitusi t\u00e4ielikult rohkem kui kolme n\u00e4dala jooksul. Citrixi kliendid on praktiliselt k\u00f5ik suured ja keskmised ettev\u00f5tted Saksamaal ning peaaegu k\u00f5ik riigiasutused. Eriti m\u00f5jutas haavatavus just riigistruktuure.<\/p>\n<h3>Aga on, millega tegeleda.<\/h3>\n<p>\nNeil, kelle s\u00fcsteemid olid kompromiteeritud, on vaja nende t\u00e4ielikku uuesti installeerimist, sealhulgas TSL-sertifikaatide vahetamist. V\u00f5ib-olla need Citrixi kliendid, kes ootasid tootjalt aktiivsemaid tegevusi kriitilise haavatavuse k\u00f5rvaldamiseks, kujundavad t\u00f5siselt alternatiive. Tuleb tunnistada, et Citrixi reaktsioon ei sisenda optimismi.<\/p>\n<h3>K\u00fcsimusi on rohkem kui vastuseid.<\/h3>\n<p>\nK\u00fcsimus on, millega tegelesid Citrixi arvukad partnerid, plaatina- ja kuldpartnerid? Miks alles 2020. aasta kolmandal n\u00e4dalal ilmus m\u00f5ne Citrixi partneri lehtedel vajalik teave? Kliariselt on ka k\u00f5rgelt tasustatud v\u00e4lishaldurid seda ohtlikku olukorda unustanud. Ma ei taha kedagi solvat, aga partneri \u00fclesanne on esmaj\u00e4rjekorras ennetada tekkivaid probleeme, mitte pakkuda = m\u00fc\u00fca abi nende lahendamisel.<\/p>\n<p>Tegelikult n\u00e4itas see olukord IT-turvalisuse tegelikku seisu. Nii ettev\u00f5tete IT-osakondade t\u00f6\u00f6tajad kui ka Citrixi partnerfirmade n\u00f5ustajad peaksid m\u00f5istma, et kui on haavatavus, tuleb see k\u00f5rvaldada. Ja kriitiline haavatavus tuleb k\u00f5rvaldada viivitamatult!<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/484548\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0440\u043e\u0433\u043e\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0447\u0438 \u0436\u0438\u0442\u0435\u043b\u0435\u043c \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u044f \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0432 \u0432\u0430\u0448\u0435\u0439 \u0441\u0442\u0440\u0430\u043d\u0435 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043a\u0430\u0440\u0434\u0438\u043d\u0430\u043b\u044c\u043d\u043e \u0438\u043d\u0430\u044f. 17 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2019 \u0433\u043e\u0434\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 Citrix Knowledge Center \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0430\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Citrix Application Delivery Controller (NetScaler ADC) \u0438 Citrix Gateway, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55464","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0414\u043e\u0440\u043e\u0433\u043e\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0447\u0438 \u0436\u0438\u0442\u0435\u043b\u0435\u043c \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u044f \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Citrix NetScaler CVE-2019-19781 \u043e\u0431\u043d\u0430\u0436\u0438\u043b\u0430 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b IT-\u043e\u0442\u0440\u0430\u0441\u043b\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0414\u043e\u0440\u043e\u0433\u043e\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0447\u0438 \u0436\u0438\u0442\u0435\u043b\u0435\u043c \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u044f \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-20T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kuidas kriitiline haavatavus Citrix NetScaler CVE-2019-19781 paljastas varjatud probleemid IT-valdkonnas | ProHoster","description":"Lugupeetud lugeja, k\u00f5igepealt tahaksin m\u00e4rkida, et olles Saksamaa elanik, kirjeldan ma eelk\u00f5ige olukorda selles riigis.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Citrix NetScaler CVE-2019-19781 \u043e\u0431\u043d\u0430\u0436\u0438\u043b\u0430 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b IT-\u043e\u0442\u0440\u0430\u0441\u043b\u0438 | ProHoster","og:description":"\u0414\u043e\u0440\u043e\u0433\u043e\u0439 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0447\u0438 \u0436\u0438\u0442\u0435\u043b\u0435\u043c \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u044f \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-kriticheskaya-uyazvimost-citrix-netscaler-cve-2019-19781-obnazhila-skrytye-problemy-it-otrasli","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-20T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55464","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:43:31","updated":"2022-09-28 09:07:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=55464"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55464\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=55464"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=55464"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=55464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}