Leak yemamiriyoni makumi maviri nemasere marekodhi anoshandiswa muBiometric identification platform BioStar 28

Vatsvagiri kubva kuvpnMentor kuzivikanwa mukana wekuvhura mukana kune dhatabhesi, iyo yakachengeta anopfuura 27.8 miriyoni marekodhi (23 GB yedata) ine chekuita nekushanda kweiyo biometric access control system. Biostar 2, iyo ine inenge mamiriyoni 1.5 kuiswa pasi rose uye yakabatanidzwa muAEOS platform, inoshandiswa nemasangano anopfuura 5700 munyika 83, kusanganisira makambani makuru nemabhangi, pamwe chete nemasangano ehurumende nemadhipatimendi emapurisa. Kudonha kwacho kwakakonzerwa nekumisikidzwa kwakashata kweElasticsearch chengetedzo, iyo yakazoita kuti iverengeke chero munhu.

Kuvuza kwacho kunowedzerwa nenyaya yekuti yakawanda dhatabhesi haina kuvharirwa uye, kuwedzera kune yako data (zita, foni, email, kero yekumba, chinzvimbo, nguva yekubhadhara, nezvimwewo), system yevashandisi kuwana matanda, vhura password ( isina hashing) uye nharembozha data, yaisanganisira mapikicha kumeso uye zvigunwe zvemunwe mifananidzo inoshandiswa pakuzivikanwa kwemushandisi webiometric.

Pakazara, dhatabhesi yakaratidza zvinopfuura miriyoni ekutanga zvigunwe scans zvine chekuita nevanhu chaivo. Kuvepo kwemifananidzo yakavhurika yezvigunwe zvisingagoni kuchinjwa zvinoita kuti varwisi vanyepedzere chigunwe vachishandisa template uye voishandisa kunzvenga magadzirirwo ekutonga kana kusiya manyepo. Kunyanya kutariswa kunobhadharwa kumhando yepassword, pakati payo pane akawanda mashoma, akadai se "Password" uye "abcd1234".

Uyezve, sezvo dhiyabhorosi yaisanganisirawo zvinyorwa zvevatungamiri veBioStar 2, kana pakaitika kurwiswa, vanorwisa vanogona kuwana ruzivo rwakakwana kune web web interface uye vashandise kuwedzera, kugadzirisa uye kubvisa zvinyorwa. Semuenzaniso, vanogona kutsiva data yezvigunwe kuti vawane mukana wepanyama, kushandura kodzero dzekuwana uye kubvisa zvimiro zvekupindira kubva mumatanda.

Zvinokosha kuziva kuti dambudziko racho rakaonekwa musi waAugust 5, asi mazuva akawanda akashandiswa kuendesa ruzivo kune vasiki veBioStar 2, avo vakanga vasingadi kuteerera vatsvakurudzi. Pakupedzisira, muna Nyamavhuvhu 7, ruzivo rwakaziviswa kukambani, asi dambudziko rakazogadziriswa musi wa13 Nyamavhuvhu. Vatsvaguri vaona dhatabhesi sechikamu chepurojekiti yekutarisa network uye kuongorora anowanikwa webhu masevhisi. Hazvizivikanwe kuti dhatabhesi yakaramba iri muvanhu kwenguva yakareba sei uye kana vapambi vaiziva nezve kuvapo kwayo.

Source: opennet.ru