UNITED NATIONS ACCIDENTALLY EXPOSED PASSWORDS AND SENSITIVE INFORMATION TO THE WHOLE INTERNET

SOURCE: THE INTERCEPT

THE UNITED NATIONS accidentally published passwords, internal documents, and technical details about websites when it misconfigured popular project management service Trello, issue tracking app Jira, and office suite Google Docs.

The mistakes made sensitive material available online to anyone with the proper link, rather than only to specific users who should have access. Affected data included credentials for a U.N. file server, the video conferencing system at the U.N.’s language school, and a web development environment for the U.N.’s Office for the Coordination of Humanitarian Affairs. Security researcher Kushagra Pathak discovered the accidental leak and notified the U.N. about what he found a little over a month ago. As of today, much of the material appears to have been taken down.

In an online chat, Pathak said he found the sensitive information by running searches on Google. The searches, in turn, produced public Trello pages, some of which contained links to the public Google Docs and Jira pages.

Trello projects are organized into “boards” that contain lists of tasks called “cards.” Boards can be public or private. After finding one public Trello board run by the U.N., Pathak found additional public U.N. boards by using “tricks like by checking if the users of one Trello board are also active on some other boards and so on.” One U.N. Trello board contained links to an issue tracker hosted on Jira, which itself contained even more sensitive information. Pathak also discovered links to documents hosted on Google Docs and Google Drive that were configured to be accessible to anyone who knew their web addresses. Some of these documents contained passwords.

READ MORE...

SHARE THIS ARTICLE...

Views: 50

Comment

You need to be a member of 12160 Social Network to add comments!

Join 12160 Social Network

Comment by Boris on September 25, 2018 at 11:50am

accident ...sure

Latest Activity

Deep Space commented on Deep Space's blog post Off The Deep End - 'Deep Space' Free-Flow Thoughts (An Ongoing Eruption)
"If one wants to know eternity, one must first understand what is not eternal"
14 minutes ago
Deep Space commented on Deep Space's blog post Off The Deep End - 'Deep Space' Free-Flow Thoughts (An Ongoing Eruption)
"If one one wants to know eternity, one must first understand what is not eternal"
15 minutes ago
Deep Space commented on Deep Space's blog post Off The Deep End - 'Deep Space' Free-Flow Thoughts (An Ongoing Eruption)
"Liberation is the realization that all form is temporary"
23 minutes ago
Marklar's Ghost favorited Deep Space's blog post Where are the ‘empty shelves’? Max Blumenthal tours Caracas supermarket (VIDEO)
26 minutes ago
Deep Space commented on Deep Space's blog post Off The Deep End - 'Deep Space' Free-Flow Thoughts (An Ongoing Eruption)
"Mama Earth is middle-aged. She's half-way through Her life cycle. Just like the sun. Mama is dependent on the sun. When the sun dies, Mama dies. She started off with dinosaurs then moved on to humans. I'm kinda sorta curious about when all…"
37 minutes ago
Deep Space commented on Deep Space's blog post Off The Deep End - 'Deep Space' Free-Flow Thoughts (An Ongoing Eruption)
"I can't keep up. So much insanity in this matrix. We definitely need a reset / reboot. Kinda like what happened to the dinosaurus might be a good thing at this point ... "
45 minutes ago
Deep Space commented on Deep Space's blog post Off The Deep End - 'Deep Space' Free-Flow Thoughts (An Ongoing Eruption)
"It's been proven from a new study that 99% of the people who type “LOL” aren't actually laughing out loud."
1 hour ago
Deep Space commented on Deep Space's blog post Off The Deep End - 'Deep Space' Free-Flow Thoughts (An Ongoing Eruption)
"Top Democrat Presidential Hopefuls Say They Support Reparations for Slavery Elizabeth Warren and Kamala Harris, two of the Democrat party’s top contenders for the White House in 2020, have expressed support for providing reparations for black…"
1 hour ago
Deep Space posted blog posts
1 hour ago
Deep Space commented on Deep Space's blog post Off The Deep End - 'Deep Space' Free-Flow Thoughts (An Ongoing Eruption)
"Juan Guaido is kinda sorta like the Venezuela version of Nancy Pelosi. Would you really want Russia & China to declare your US elections invalid & install Nancy Pelosi, or whoever, could be Maxine Waters, as your President without any…"
2 hours ago
Diana commented on James T. Kirk's video
Thumbnail

Reparations! Warren and Harris are Race Baiting Morons, Don't Understand the Constitution

"Great reparations, Kamala's family owned slaves: In the article, Donald Harris (Kamala's Father) explained the family’s Jamaican roots, writing: My roots go back, within my lifetime, to my paternal grandmother Miss Chrishy…"
4 hours ago
Diana favorited James T. Kirk's video
5 hours ago
Chris of the family Masters commented on Deep Space's blog post Should we screen everyone running for public service for psychopathy?
"Job interviews for high-ranking positions are set up to attract psychopaths. I've got an inside knowledge."
5 hours ago
Old Denmark commented on rlionhearted_3's photo
5 hours ago
Old Denmark favorited rlionhearted_3's photo
5 hours ago
Chris of the family Masters commented on rlionhearted_3's photo
Thumbnail

7FC9FCF3-DDFB-46AF-AEB0-BC8CE94DFCFF

"Actually, never does.... We just believe so..."
6 hours ago

Please remember this website is supported by your donations...

© 2019   Created by truth.   Powered by

Badges  |  Report an Issue  |  Terms of Service

content and site copyright 12160.info 2007-2015 - all rights reserved. unless otherwise noted