UNITED NATIONS ACCIDENTALLY EXPOSED PASSWORDS AND SENSITIVE INFORMATION TO THE WHOLE INTERNET

SOURCE: THE INTERCEPT

THE UNITED NATIONS accidentally published passwords, internal documents, and technical details about websites when it misconfigured popular project management service Trello, issue tracking app Jira, and office suite Google Docs.

The mistakes made sensitive material available online to anyone with the proper link, rather than only to specific users who should have access. Affected data included credentials for a U.N. file server, the video conferencing system at the U.N.’s language school, and a web development environment for the U.N.’s Office for the Coordination of Humanitarian Affairs. Security researcher Kushagra Pathak discovered the accidental leak and notified the U.N. about what he found a little over a month ago. As of today, much of the material appears to have been taken down.

In an online chat, Pathak said he found the sensitive information by running searches on Google. The searches, in turn, produced public Trello pages, some of which contained links to the public Google Docs and Jira pages.

Trello projects are organized into “boards” that contain lists of tasks called “cards.” Boards can be public or private. After finding one public Trello board run by the U.N., Pathak found additional public U.N. boards by using “tricks like by checking if the users of one Trello board are also active on some other boards and so on.” One U.N. Trello board contained links to an issue tracker hosted on Jira, which itself contained even more sensitive information. Pathak also discovered links to documents hosted on Google Docs and Google Drive that were configured to be accessible to anyone who knew their web addresses. Some of these documents contained passwords.

READ MORE...

SHARE THIS ARTICLE...

Views: 83

Comment

You need to be a member of 12160 Social Network to add comments!

Join 12160 Social Network

Comment by Boris on September 25, 2018 at 11:50am

accident ...sure

"Destroying the New World Order"

TOP CONTENT THIS WEEK

THANK YOU FOR SUPPORTING THE SITE!

mobile page

12160.info/m

12160 Administrators

 

Latest Activity

Doc Vega commented on Doc Vega's blog post “Night of Horror” Finland WWII 1939 and a Russian Massacre
"Just another bizarre chapter in WWII that seems more suspect as paranormal."
33 minutes ago
Doc Vega's 7 blog posts were featured
1 hour ago
Burbia's blog post was featured

Former President Trump?

When was this article written? It is attributed to Victor Davis Hanson. He is a Fellow at Hoover…See More
1 hour ago
Less Prone commented on Burbia's blog post Former President Trump?
"It must be an unintended mistake "former". But that Trump demanded to keep Khan away is a…"
1 hour ago
Less Prone favorited Doc Vega's blog post The Mistake We Made in America
1 hour ago
Less Prone favorited Doc Vega's blog post “Night of Horror” Finland WWII 1939 and a Russian Massacre
1 hour ago
Less Prone commented on Doc Vega's blog post “Night of Horror” Finland WWII 1939 and a Russian Massacre
"Quite an uplifting story of the winter war. Finland was overpowered by ten to one and could still…"
1 hour ago
Doc Vega posted a blog post

Elon Weighs in on Charlie Kirk's Assassination and How it is an Instrument of Social Control

For a very long time now there has been in place mass population behavioral control operations that…See More
21 hours ago
Doc Vega commented on Doc Vega's blog post The Forest Devil
"Less Prone Thanks Buddy I worked on it for 3 days! "
yesterday
Less Prone favorited Doc Vega's blog post The Forest Devil
yesterday
Less Prone commented on Doc Vega's blog post The Forest Devil
"You have spun a great story, congratulations!"
yesterday
cheeki kea commented on Bob of the Family Renner's photo
Friday
Doc Vega posted a blog post
Thursday
tjdavis posted blog posts
Thursday
Doc Vega posted photos
Wednesday
tjdavis posted a blog post
Wednesday
Doc Vega commented on Doc Vega's blog post Is this proof that the story about Charlie Kirk's assassination is false?
"Les prone, Thanks Buddy! "
Tuesday
Doc Vega posted a blog post
Tuesday
tjdavis posted a photo
Tuesday
Doc Vega commented on Doc Vega's blog post Is this proof that the story about Charlie Kirk's assassination is false?
"Less Prone as usual the official version of the truth does not match the evidence and is labeled…"
Oct 4

© 2025   Created by truth.   Powered by

Badges  |  Report an Issue  |  Terms of Service

content and site copyright 12160.info 2007-2019 - all rights reserved. unless otherwise noted