{"id":144091,"date":"2025-10-03T23:11:58","date_gmt":"2025-10-03T21:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vzlom-vnutrennego-gitlab-servera-red-hat"},"modified":"2025-10-03T23:11:58","modified_gmt":"2025-10-03T21:11:58","slug":"vzlom-vnutrennego-gitlab-servera-red-hat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/vzlom-vnutrennego-gitlab-servera-red-hat","title":{"rendered":"A Red Hat bels\u0151 GitLab szerver\u00e9nek felt\u00f6r\u00e9se","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Crimson Collective hacker group announced that they gained access to one of Red Hat's internal GitLab servers and downloaded 570GB of compressed data containing information from 28,000 repositories. Among other things, the captured data included about 800 CER reports (Customer Engagement Report), which contained confidential information about Red Hat's clients' platforms and network infrastructures, who were provided with consulting services. <\/p>\n

A bemutatott t\u00e1mad\u00f3kt\u00f3l sz\u00e1rmaz\u00f3 k\u00e9perny\u0151k\u00e9pek \u00e9s p\u00e9ld\u00e1k eml\u00edt\u00e9st tesznek k\u00f6r\u00fclbel\u00fcl 800 Red Hat \u00fcgyf\u00e9l adatainak megszerz\u00e9s\u00e9r\u0151l, k\u00f6zt\u00fck a Vodafone, T-Mobile, Siemens, Boeing, Bosch, 3M, Cisco, DHL, Adobe, American Express, Verizon, JPMC, HSBC, Ericsson, Merrick Bank, Telefonica, Bank of America, Delta Air Lines, Walmart, Kaiser, IBM, SWIFT, IKEA \u00e9s AT&T, valamint az Egyes\u00fclt \u00c1llamok Haditenger\u00e9szet\u00e9nek Felsz\u00edni Fegyverfejleszt\u00e9si K\u00f6zpontja, az Egyes\u00fclt \u00c1llamok Sz\u00f6vets\u00e9gi L\u00e9gik\u00f6zleked\u00e9si Hat\u00f3s\u00e1ga, az Egyes\u00fclt \u00c1llamok Sz\u00f6vets\u00e9gi Katasztr\u00f3fav\u00e9delmi \u00dcgyn\u00f6ks\u00e9ge, az Egyes\u00fclt \u00c1llamok L\u00e9giereje, az Egyes\u00fclt \u00c1llamok Nemzetbiztons\u00e1gi \u00dcgyn\u00f6ks\u00e9ge, az Egyes\u00fclt \u00c1llamok Szabadalmi \u00e9s V\u00e9djegy Hivatala, az Egyes\u00fclt \u00c1llamok Szen\u00e1tusa \u00e9s a K\u00e9pvisel\u0151h\u00e1z. <\/p>\n

It is claimed that the captured repositories contain data about clients' infrastructure, configurations, authentication tokens, profiles VPN<\/a>, inventory data, Ansible playbooks, OpenShift platform settings, CI\/CD runners, backups, and other data that could be used to launch attacks on clients' internal networks. The attackers attempted to contact Red Hat for extortion but only received a template response suggesting they report the vulnerability to the security team. <\/p>\n

Red Hat has confirmed the security incident but has not provided details or commented on the nature of the leak. It is only mentioned that the hacked GitLab server was used in the consulting division and that the company has taken the necessary steps for investigation and recovery. Representatives from Red Hat assert that they have no reason to believe that the breach affected any other services or products, except for one. a szerver<\/a> GitLab. <\/p>\n

Kieg\u00e9sz\u00edt\u00e9s: A Red Hat c\u00e9g k\u00f6zz\u00e9tette az incidens els\u0151 jelent\u00e9s\u00e9t. A jelent\u00e9sben r\u00e9szletek nem tal\u00e1lhat\u00f3k, csak annyi, hogy a c\u00e9g nyomoz\u00e1st ind\u00edtott, mely sor\u00e1n kider\u00fclt, hogy ismeretlen szem\u00e9ly hozz\u00e1f\u00e9rt a GitLab szerverhez, amelyet a Red Hat Consulting csapat projektjeinek kezel\u00e9s\u00e9re haszn\u00e1lnak, \u00e9s let\u00f6lt\u00f6tt onnan bizonyos adatokat. <\/p>\n

Az \u00e1ll\u00edt\u00e1s szerint a t\u00e1mad\u00f3 \u00e1ltal let\u00f6lt\u00f6tt adatok projekt-specifik\u00e1ci\u00f3kat, k\u00f3dmint\u00e1kat \u00e9s bels\u0151 inform\u00e1ci\u00f3s anyagokat tartalmaztak a tan\u00e1csad\u00f3i szolg\u00e1ltat\u00e1sokr\u00f3l. Az incidens elemz\u00e9s\u00e9nek jelen szakasz\u00e1ban eddig nem tal\u00e1lhat\u00f3 fontos szem\u00e9lyes adatok sziv\u00e1rg\u00e1sa. <\/p>\n

A t\u00e1mad\u00f3 hozz\u00e1f\u00e9r\u00e9s\u00e9nek m\u00f3dja a GitLab szerverhez nem tiszt\u00e1zott, de azt k\u00f6z\u00f6lt\u00e9k, hogy a tegnap felfedezett OpenShift AI Service-ben tal\u00e1lhat\u00f3 (CVE-2025-10725) sebezhet\u0151s\u00e9get nem haszn\u00e1lt\u00e1k, ami lehet\u0151v\u00e9 tette egy hiteles\u00edtett, nem privilegiz\u00e1lt felhaszn\u00e1l\u00f3, p\u00e9ld\u00e1ul egy Jupyter notebookot haszn\u00e1l\u00f3 kutat\u00f3 sz\u00e1m\u00e1ra, hogy adminisztr\u00e1tori jogokat szerezzen a klaszterhez, teljes hozz\u00e1f\u00e9r\u00e9ssel minden szolg\u00e1ltat\u00e1shoz, adathoz \u00e9s a klaszterben fut\u00f3 alkalmaz\u00e1sokhoz, valamint root hozz\u00e1f\u00e9r\u00e9ssel a klaszter csom\u00f3pontjaihoz.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Crimson Collective \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441 \u043d\u0435\u0433\u043e 570\u0413\u0411 \u0441\u0436\u0430\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 28 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0432 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u043e\u043a\u043e\u043b\u043e 800 CER-\u043e\u0442\u0447\u0451\u0442\u043e\u0432 (Customer Engagement Report), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Red Hat, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-144091","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A Red Hat bels\u0151 GitLab szerver\u00e9nek felt\u00f6r\u00e9se | ProHoster","description":"A Crimson Collective hacker csoport bejelentette, hogy hozz\u00e1f\u00e9rtek a Red Hat c\u00e9g egyik bels\u0151 GitLab szerver\u00e9hez, \u00e9s onnan 570 GB t\u00f6m\u00f6r\u00edtett adatot t\u00f6lt\u00f6ttek le, amely 28 ezer t\u00e1rol\u00f3b\u00f3l sz\u00e1rmaz\u00f3 inform\u00e1ci\u00f3kat tartalmazott.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/vzlom-vnutrennego-gitlab-servera-red-hat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Red Hat | ProHoster","og:description":"\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Crimson Collective \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441 \u043d\u0435\u0433\u043e 570\u0413\u0411 \u0441\u0436\u0430\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 28 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/vzlom-vnutrennego-gitlab-servera-red-hat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-10-03T21:11:58+00:00","article:modified_time":"2025-10-03T21:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"144091","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:54:02","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:06:19","updated":"2026-02-22 15:54:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/144091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=144091"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/144091\/revisions"}],"predecessor-version":[{"id":162511,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/144091\/revisions\/162511"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=144091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=144091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=144091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}