{"id":33578,"date":"2019-10-31T21:53:23","date_gmt":"2019-10-31T18:53:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vse-vashi-analizy-v-otkrytom-dostupe\/"},"modified":"2019-10-31T21:53:23","modified_gmt":"2019-10-31T18:53:23","slug":"vse-vashi-analizy-v-otkrytom-dostupe","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vse-vashi-analizy-v-otkrytom-dostupe","title":{"rendered":"T\u00eb gjitha analizat tuaja jan\u00eb n\u00eb dispozitiojn e hapur","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pershendetje p\u00ebrs\u00ebri! Kam gjetur nj\u00eb baz\u00eb t\u00eb hapur me t\u00eb dh\u00ebna mjek\u00ebsore p\u00ebr ju. T\u00eb kujtoj se disa koh\u00eb m\u00eb par\u00eb kishte tre artikuj t\u00eb mi mbi k\u00ebt\u00eb tem\u00eb: rrjedhja e t\u00eb dh\u00ebnave personale t\u00eb pacient\u00ebve dhe mjek\u00ebve nga sh\u00ebrbimi mjek\u00ebsor online DOC+<\/a><\/noindex>, dob\u00ebsia e sh\u00ebrbimit 'Doktor pran\u00eb'<\/a><\/noindex> dhe rrjedhja e t\u00eb dh\u00ebnave t\u00eb stacioneve t\u00eb ndihm\u00ebs s\u00eb shpejt\u00eb mjek\u00ebsore<\/a><\/noindex>.<\/p>\n

<\/p>\n

\"T\u00eb<\/p>\n

<\/p>\n

K\u00ebt\u00eb her\u00eb n\u00eb akses t\u00eb hapur doli nj\u00eb server Elasticsearch me log-e t\u00eb sistemit IT mjek\u00ebsor t\u00eb rrjetit t\u00eb laborator\u00ebve 'Qendra e Diagnostik\u00ebs Molekulare<\/em>'' (CMD, www.cmd-online.ru).<\/p>\n

<\/a><\/noindex><\/p>\n

Disklemeri: t\u00eb gjitha informacionet m\u00eb posht\u00eb publikohen ekskluzivisht p\u00ebr q\u00ebllime edukative. Autori nuk ka marr\u00eb akses n\u00eb t\u00eb dh\u00ebnat personale t\u00eb pal\u00ebve t\u00eb treta dhe kompanive. Informacioni \u00ebsht\u00eb marr\u00eb ose nga burime t\u00eb hapura, ose \u00ebsht\u00eb ofruar autorit nga mir\u00ebdash\u00ebs anonim\u00eb.<\/code><\/p>\n

<\/p>\n

Serveri u zbulua n\u00eb m\u00ebngjesin e 1 prillit dhe kjo nuk m\u00eb dukej aspak qesharake. Njoftimi p\u00ebr problem shkoi n\u00eb CMD rreth or\u00ebs 10:00 (MSK) dhe rreth or\u00ebs 15:00 baza u b\u00eb e paaksesueshme. <\/p>\n

<\/p>\n

Sipas t\u00eb dh\u00ebnave nga k\u00ebrkuesi Shodan, ky server filloi t\u00eb ishte n\u00eb akses t\u00eb hapur m\u00eb 09.03.2019. Pun\u00ebn mbi si gjejn\u00eb bazat e dh\u00ebnash t\u00eb hapura Elasticsearch<\/a><\/noindex>, kam shkruar nj\u00eb artikull t\u00eb ve\u00e7ant\u00eb.<\/p>\n

<\/p>\n

Nga log-et mund t\u00eb merren informacione shum\u00eb t\u00eb ndjeshme, p\u00ebrfshir\u00eb emra t\u00eb plot\u00eb, gjin, datat e lindjes s\u00eb pacient\u00ebve, emra t\u00eb plot\u00eb t\u00eb mjek\u00ebve, kostoja e ekzaminimeve, t\u00eb dh\u00ebnat e ekzaminimeve, skedar\u00eb me rezultatet e skrinimeve<\/strong> dhe shum\u00eb t\u00eb tjera.<\/p>\n

<\/p>\n

Shembulli i log-ut me rezultatet e analizave t\u00eb pacientit:<\/p>\n

<\/p>\n

Pasaport0423BF97FA5E-1DWW98675708386841791018.03.2019\u0420\u041e\u0421\u0421 RU.13\u0421\u041a03.006012iVBORw0KGgoAAAANSUhEUgAABfoAAAfuCAIAAAArOR8rAAD\/\/0lEQVR4Xuy9P7BtQ7u+\/e3oECF6iRAhQoQI0SZCtIkQIdpEiBCxI0SIECFiV50qRKg6VYgQIUKEiDfiRL7rnPtXz+nqHnPMsfb6s+cc61rBqjl79Oh++uoe\/eceT\/c8888\/\/\/<\/code><\/pre>\n
<\/p>\n
I kam gjith\u00e7ka t\u00eb dh\u00ebn\u00eb t\u00eb ndjeshme me simbolin \u00abX\u00bb. N\u00eb realitet, gjith\u00e7ka ishte ruajtur hapur.<\/em><\/p>\n
<\/p>\n
Nga k\u00ebto loge, leht\u00eb (duke dekoduar nga Base64) mund t\u00eb merreshin skedar\u00eb PNG me rezultatet e skrinimit, tashm\u00eb n\u00eb nj\u00eb format t\u00eb leht\u00eb p\u00ebr t'u lexuar:<\/p>\n
<\/p>\n
\"T\u00eb <\/p>\n
<\/p>\n
Shuma totale e log\u00ebve tejkaloi 400 MB dhe p\u00ebrmbante mbi nj\u00eb milion regjistrime. \u00cbsht\u00eb e qart\u00eb q\u00eb jo \u00e7do regjistrim p\u00ebrfaq\u00ebsonte t\u00eb dh\u00ebnat e nj\u00eb pacienti unik.<\/p>\n
<\/p>\n
P\u00ebrgjigjja zyrtare nga CMD: <\/p>\n
<\/p>\n
D\u00ebshirojm\u00eb t'ju falenderojm\u00eb p\u00ebr informacionin e d\u00ebrguar me shpejt\u00ebsi m\u00eb 01.04.2019 mbi ekzistenc\u00ebn e nj\u00eb dob\u00ebsie n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave t\u00eb regjistrimit dhe ruajtjes s\u00eb gabimeve Elasticsearch. <\/p>\n
N\u00eb baz\u00eb t\u00eb k\u00ebtij informacioni, punonj\u00ebsit tan\u00eb, s\u00eb bashku me specialist\u00ebt p\u00ebrkat\u00ebs, kufizuan qasjen n\u00eb at\u00eb baz\u00eb t\u00eb dh\u00ebnash. Gabimi i d\u00ebrgimit t\u00eb informacionit t\u00eb ndjesh\u00ebm n\u00eb baz\u00ebn teknike \u00ebsht\u00eb korrigjuar.<\/p>\n
Gjat\u00eb shqyrtimit t\u00eb incidentit, doli n\u00eb pah se shfaqja n\u00eb qarkullim e asaj baze me log\u00eb gabimesh ndodhi p\u00ebr shkak t\u00eb faktor\u00ebve njer\u00ebzor\u00eb. Qasja n\u00eb t\u00eb dh\u00ebna u mbyll menj\u00ebher\u00eb m\u00eb 01.04.2019. <\/p>\n
Aktualisht, po kryhen aktivitete nga specialist\u00ebt e brendsh\u00ebm dhe t\u00eb jasht\u00ebm p\u00ebr nj\u00eb auditim shtes\u00eb t\u00eb infrastruktur\u00ebs IT lidhur me mbrojtjen e t\u00eb dh\u00ebnave. <\/p>\n
Organizata jon\u00eb ka zhvilluar nj\u00eb rregullore t\u00eb ve\u00e7ant\u00eb p\u00ebr pun\u00ebn me t\u00eb dh\u00ebnat personale dhe sistemin e p\u00ebrgjegj\u00ebsive t\u00eb nivelit p\u00ebr stafin. <\/p>\n
Infrastruktura aktuale e softuerit parashikon p\u00ebrdorimin e baz\u00ebs Elasticsearch p\u00ebr ruajtjen e gabimeve. P\u00ebr t\u00eb rritur besueshm\u00ebrin\u00eb e disa sistemeve, do t\u00eb realizohet migrimi i server\u00ebve p\u00ebrkat\u00ebs n\u00eb Qendr\u00ebn e T\u00eb Dh\u00ebnave t\u00eb partnerit ton\u00eb, n\u00eb nj\u00eb ambient t\u00eb certifikuar software-hardware. <\/p>\n
Faleminderit p\u00ebr informacionin e dh\u00ebn\u00eb n\u00eb koh\u00eb.<\/p><\/blockquote>\n
Lajmet p\u00ebr rrjedhjet e informacionit dhe insajder\u00ebt gjithmon\u00eb mund t'i gjeni n\u00eb kanalin tim n\u00eb Telegram \"Rrjedhjet e informacionit<\/a><\/noindex>\u00bb.<\/p>\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0418 \u0441\u043d\u043e\u0432\u0430 \u0437\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435! \u0423 \u043c\u0435\u043d\u044f \u043e\u043f\u044f\u0442\u044c \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u0430\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u0430\u044f \u0431\u0430\u0437\u0430 \u0441 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438. \u041d\u0430\u043f\u043e\u043c\u043d\u044e, \u0447\u0442\u043e \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0442\u0443\u0442 \u0431\u044b\u043b\u043e \u0442\u0440\u0438 \u043c\u043e\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u0438 \u043d\u0430 \u044d\u0442\u0443 \u0442\u0435\u043c\u0443: \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0446\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u0432\u0440\u0430\u0447\u0435\u0439 \u0438\u0437 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u043d\u043b\u0430\u0439\u043d-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 DOC+, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u00ab\u0414\u043e\u043a\u0442\u043e\u0440 \u0440\u044f\u0434\u043e\u043c\u00bb \u0438 \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439 \u0441\u043a\u043e\u0440\u043e\u0439 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043e\u043c\u043e\u0449\u0438. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0441\u0435\u0440\u0432\u0435\u0440 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25272,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33578","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47T\u00eb gjitha analizat tuaja n\u00eb dispozicion t\u00eb hapur | ProHoster","description":"P\u00ebrs\u00ebritim i p\u00ebrsh\u00ebndetjes! S\u00ebrish kam gjetur nj\u00eb baz\u00eb t\u00eb hapur me t\u00eb dh\u00ebna mjek\u00ebsore p\u00ebr ju. T\u00eb kujtoj se s\u00eb fundmi jan\u00eb publikuar k\u00ebtu tre artikujt e mi mbi k\u00ebt\u00eb tem\u00eb: rrjedhja e t\u00eb dh\u00ebnave personale t\u00eb pacient\u00ebve dhe mjek\u00ebve nga sh\u00ebrbimi mjek\u00ebsor online DOC+, dob\u00ebsit\u00eb e sh\u00ebrbimit 'Mjeku pran\u00eb' dhe rrjedhja e t\u00eb dh\u00ebnave t\u00eb stacioneve t\u00eb ndihm\u00ebs s\u00eb shpejt\u00eb. K\u00ebt\u00eb her\u00eb, nj\u00eb server \u00ebsht\u00eb b\u00ebr\u00eb i aksesuesh\u00ebm publikisht.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vse-vashi-analizy-v-otkrytom-dostupe","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0441\u0435 \u0432\u0430\u0448\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u044b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 | ProHoster","og:description":"\u0418 \u0441\u043d\u043e\u0432\u0430 \u0437\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435! \u0423 \u043c\u0435\u043d\u044f \u043e\u043f\u044f\u0442\u044c \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u0430\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u0430\u044f \u0431\u0430\u0437\u0430 \u0441 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438. \u041d\u0430\u043f\u043e\u043c\u043d\u044e, \u0447\u0442\u043e \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0442\u0443\u0442 \u0431\u044b\u043b\u043e \u0442\u0440\u0438 \u043c\u043e\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u0438 \u043d\u0430 \u044d\u0442\u0443 \u0442\u0435\u043c\u0443: \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0446\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u0432\u0440\u0430\u0447\u0435\u0439 \u0438\u0437 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u043d\u043b\u0430\u0439\u043d-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 DOC+, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u00ab\u0414\u043e\u043a\u0442\u043e\u0440 \u0440\u044f\u0434\u043e\u043c\u00bb \u0438 \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439 \u0441\u043a\u043e\u0440\u043e\u0439 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043e\u043c\u043e\u0449\u0438. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0441\u0435\u0440\u0432\u0435\u0440","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vse-vashi-analizy-v-otkrytom-dostupe","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:23+00:00","article:modified_time":"2019-10-31T18:53:23+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33578","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:51:39","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:38:09","updated":"2026-01-21 15:51:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/33578","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=33578"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/33578\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/25272"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=33578"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=33578"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=33578"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}