{"id":144091,"date":"2025-10-03T23:11:58","date_gmt":"2025-10-03T21:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vzlom-vnutrennego-gitlab-servera-red-hat"},"modified":"2025-10-03T23:11:58","modified_gmt":"2025-10-03T21:11:58","slug":"vzlom-vnutrennego-gitlab-servera-red-hat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vzlom-vnutrennego-gitlab-servera-red-hat","title":{"rendered":"Securitate compromis\u0103 pe serverul intern GitLab al Red Hat","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Grupul de hackeri Crimson Collective a anun\u021bat c\u0103 a ob\u021binut acces la unul dintre serverele interne GitLab ale companiei Red Hat \u0219i a desc\u0103rcat 570GB de date comprimate, con\u021bin\u00e2nd informa\u021bii din 28.000 de depozite. Printre altele, \u00een datele capturate se aflau aproximativ 800 de rapoarte CER (Customer Engagement Report), con\u021bin\u00e2nd informa\u021bii confiden\u021biale despre platformele \u0219i infrastructurile de re\u021bea ale clien\u021bilor Red Hat, care au beneficiat de servicii de consultan\u021b\u0103. <\/p>\n

\u00cen capturile de ecran \u0219i exemplele prezentate de atacatori se men\u021bioneaz\u0103 ob\u021binerea de date legate de aproximativ 800 de clien\u021bi Red Hat, printre care se num\u0103r\u0103 Vodafone, T-Mobile, Siemens, Boeing, Bosch, 3M, Cisco, DHL, Adobe, American Express, Verizon, JPMC, HSBC, Ericsson, Merrick Bank, Telefonica, Bank of America, Delta Air Lines, Walmart, Kaiser, IBM, SWIFT, IKEA \u0219i AT&T, precum \u0219i Centrul de dezvoltare a armamentului naval al Marinei SUA, Administra\u021bia Federal\u0103 a Avia\u021biei din SUA, Agen\u021bia Federal\u0103 pentru Gestionarea Situa\u021biilor de Urgen\u021b\u0103 din SUA, For\u021bele Aerienne ale SUA, Agen\u021bia Na\u021bional\u0103 de Securitate a SUA, Oficiul pentru Brevete \u0219i M\u0103rci Comerciale din SUA, Senatul SUA \u0219i Camera Reprezentan\u021bilor SUA. <\/p>\n

Se sus\u021bine c\u0103 depozitele capturate con\u021bin informa\u021bii despre infrastructura clien\u021bilor, configura\u021bii, tokenuri de autentificare, profile VPN<\/a>, date de inventar, playbook-uri Ansible, configura\u021bii pentru platforma OpenShift, runner-e CI\/CD, backup-uri \u0219i alte date care ar putea fi utilizate pentru organizarea unui atac asupra re\u021belelor interne ale clien\u021bilor. Atacatorii au \u00eencercat s\u0103 contacteze Red Hat \u00een scop de \u0219antaj, dar au primit doar un r\u0103spuns standardizat cu oferta de a trimite un raport de vulnerabilitate la serviciul de securitate. <\/p>\n

Compania Red Hat a confirmat incidentul de securitate, dar nu a oferit detalii \u0219i nu a comentat informa\u021biile despre con\u021binutul scurgerii. Se men\u021bioneaz\u0103 doar c\u0103 serverul GitLab compromis a fost folosit \u00een cadrul departamentului de consultan\u021b\u0103 \u0219i compania a f\u0103cut pa\u0219ii necesari pentru investigare \u0219i recuperare. Reprezentan\u021bii Red Hat sus\u021bin c\u0103 nu au motive s\u0103 cread\u0103 c\u0103 bre\u0219a a afectat alte servicii \u0219i produse ale companiei, cu excep\u021bia unuia server<\/a> GitLab. <\/p>\n

Addendum: Compania Red Hat a publicat un raport ini\u021bial despre incident. Detaliile din raport nu sunt furnizate, fiind men\u021bionat doar c\u0103 compania a \u00eenceput o investiga\u021bie, \u00een cadrul c\u0103reia a fost descoperit c\u0103 un necunoscut a ob\u021binut acces la serverul GitLab folosit pentru gestionarea proiectelor echipei Red Hat Consulting \u0219i a desc\u0103rcat unele date de pe acesta. <\/p>\n

Referitor la datele desc\u0103rcate de atacator, se afirm\u0103 c\u0103 acestea con\u021bineau specifica\u021biile proiectelor, exemple de cod \u0219i materiale informative interne despre serviciile de consultan\u021b\u0103. La aceast\u0103 etap\u0103 a analizei incidentului, nu s-a constatat o scurgere a unor date personale importante. <\/p>\n

Modul \u00een care atacatorul a reu\u0219it s\u0103 ob\u021bin\u0103 acces la serverul GitLab nu este precizat, dar se men\u021bioneaz\u0103 c\u0103 \u00een atac nu a fost utilizat\u0103 vulnerabilitatea recent descoperit\u0103 (CVE-2025-10725) \u00een OpenShift AI Service, care permite unui utilizator autenticat, dar f\u0103r\u0103 privilegii, de exemplu, unui cercet\u0103tor folosind Jupyter notebook, s\u0103 ob\u021bin\u0103 drepturi de administrator al clusterului, av\u00e2nd acces complet la toate serviciile, datele \u0219i aplica\u021biile rulate \u00een cluster, precum \u0219i acces root la nodurile clusterului.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Crimson Collective \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441 \u043d\u0435\u0433\u043e 570\u0413\u0411 \u0441\u0436\u0430\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 28 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0432 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u043e\u043a\u043e\u043b\u043e 800 CER-\u043e\u0442\u0447\u0451\u0442\u043e\u0432 (Customer Engagement Report), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Red Hat, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-144091","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Spargerea serverului intern GitLab Red Hat | ProHoster","description":"Gruparea de hackeri Crimson Collective a declarat c\u0103 a ob\u021binut acces la unul dintre serverele interne GitLab ale companiei Red Hat \u0219i a desc\u0103rcat de pe acesta 570GB de date comprimate, con\u021bin\u00e2nd informa\u021bii din 28 de mii de repository-uri.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vzlom-vnutrennego-gitlab-servera-red-hat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Red Hat | ProHoster","og:description":"\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Crimson Collective \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 GitLab-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441 \u043d\u0435\u0433\u043e 570\u0413\u0411 \u0441\u0436\u0430\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 28 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vzlom-vnutrennego-gitlab-servera-red-hat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-10-03T21:11:58+00:00","article:modified_time":"2025-10-03T21:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"144091","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:54:02","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:06:19","updated":"2026-02-22 15:54:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/144091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=144091"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/144091\/revisions"}],"predecessor-version":[{"id":162511,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/144091\/revisions\/162511"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=144091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=144091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=144091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}