{"id":32532,"date":"2019-10-31T21:47:34","date_gmt":"2019-10-31T18:47:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vzlom-infrastruktury-docker-hub-s-vozmozhnoj-komprometatsiej-svyazannyh-repozitoriev\/"},"modified":"2019-10-31T21:47:34","modified_gmt":"2019-10-31T18:47:34","slug":"vzlom-infrastruktury-docker-hub-s-vozmozhnoj-komprometatsiej-svyazannyh-repozitoriev","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/vzlom-infrastruktury-docker-hub-s-vozmozhnoj-komprometatsiej-svyazannyh-repozitoriev","title":{"rendered":"Pirater l'infrastructure de Docker Hub avec une possible compromission des d\u00e9p\u00f4ts associ\u00e9s","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Utilisateurs Docker Hub<\/a><\/noindex>, le r\u00e9pertoire officiel des conteneurs pour le syst\u00e8me Docker, a re\u00e7u une notification<\/a><\/noindex> concernant une violation de l'infrastructure du projet. \u00c0 la suite de l'attaque, une base de donn\u00e9es d'utilisateurs, incluant des informations sur 190 000 utilisateurs du service, y compris les hachages de leurs mots de passe et des jetons d'acc\u00e8s aux d\u00e9p\u00f4ts sur GitHub et Bitbucket, a \u00e9t\u00e9 compromise. Pour \u00e9viter la propagation de l'attaque, la cr\u00e9ation d'images a \u00e9t\u00e9 suspendue et les jetons pour GitHub et Bitbucket ont \u00e9t\u00e9 r\u00e9voqu\u00e9s. <\/p>\n

Tous les utilisateurs de Docker Hub sont fortement conseill\u00e9s de changer imm\u00e9diatement leurs mots de passe, surtout s'ils utilisent un m\u00eame mot de passe sur plusieurs plateformes. En cas d'utilisation de constructions automatis\u00e9es li\u00e9es \u00e0 un d\u00e9p\u00f4t sur GitHub ou Bitbucket, il est \u00e9galement recommand\u00e9 d'activer l'authentification \u00e0 deux facteurs et de mettre \u00e0 jour l'identifiant de connexion OAuth (doit<\/a><\/noindex> d\u00e9tacher et reconnecter le d\u00e9p\u00f4t). <\/p>\n

Dans le cas d'une liaison avec le d\u00e9p\u00f4t, des autorisations compl\u00e8tes de lecture et d'\u00e9criture ont \u00e9t\u00e9 demand\u00e9es, c'est-\u00e0-dire qu'une compromission de Docker Hub pourrait \u00e9galement entra\u00eener une compromission des d\u00e9p\u00f4ts li\u00e9s. En cas de liaison, il convient de v\u00e9rifier attentivement
\nle journal (GitHub<\/a><\/noindex> BitBucket<\/a><\/noindex>) des \u00e9v\u00e9nements r\u00e9cents pour d\u00e9tecter toute activit\u00e9 suspecte. De plus,
\nen cas de stockage de cl\u00e9s d'acc\u00e8s \u00e0 diverses API dans des d\u00e9p\u00f4ts et conteneurs non publics, ces cl\u00e9s doivent \u00e9galement \u00eatre mises \u00e0 jour, car les attaquants ont pu acc\u00e9der aux d\u00e9p\u00f4ts priv\u00e9s.<\/p>\n

\"Pirater<\/a><\/noindex><\/center><\/p>\n

L'infrastructure de Docker Hub a \u00e9t\u00e9 attaqu\u00e9e le 25 avril. Au cours de l'attaque, les cybercriminels ont eu acc\u00e8s \u00e0 la base de donn\u00e9es du projet et aux informations des utilisateurs, \u00e0 l'exception des donn\u00e9es financi\u00e8res. Une enqu\u00eate initiale a r\u00e9v\u00e9l\u00e9 que la fuite concerne les donn\u00e9es d'environ 190 000 utilisateurs, ce qui repr\u00e9sente environ 5 % de la base d'utilisateurs totale du service. Des informations suppl\u00e9mentaires sur l'incident ne sont pas encore disponibles, l'enqu\u00eate n'\u00e9tant pas termin\u00e9e.<\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Docker Hub, \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b Docker, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0440\u0443\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043f\u043e\u043f\u0430\u043b\u0430 \u0431\u0430\u0437\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e 190 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0445\u044d\u0448\u0438 \u0438\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u043d\u0430 GitHub \u0438 Bitbucket. \u0414\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0431\u043e\u0440\u043e\u043a \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e, \u0430 \u0442\u043e\u043a\u0435\u043d\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24331,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-32532","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Violation de l'infrastructure de Docker Hub avec une possible compromission des d\u00e9p\u00f4ts li\u00e9s | ProHoster","description":"Les utilisateurs de Docker Hub, le r\u00e9pertoire officiel des conteneurs pour le syst\u00e8me Docker, ont re\u00e7u","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/vzlom-infrastruktury-docker-hub-s-vozmozhnoj-komprometatsiej-svyazannyh-repozitoriev","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b Docker Hub \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0435\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 | ProHoster","og:description":"\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Docker Hub, \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b Docker, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/vzlom-infrastruktury-docker-hub-s-vozmozhnoj-komprometatsiej-svyazannyh-repozitoriev","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:47:34+00:00","article:modified_time":"2019-10-31T18:47:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32532","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 11:20:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:57:22","updated":"2026-01-21 11:20:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/32532","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=32532"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/32532\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/24331"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=32532"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=32532"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=32532"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}