{"id":155957,"date":"2024-05-05T11:05:00","date_gmt":"2024-05-05T08:05:00","guid":{"rendered":"https:\/\/podiji.karpat.in.ua\/?p=155957"},"modified":"2024-05-05T01:19:59","modified_gmt":"2024-05-04T22:19:59","slug":"kibertamadas-erte-a-dropboxot","status":"publish","type":"post","link":"https:\/\/podiji.karpat.in.ua\/?p=155957&lang=hu","title":{"rendered":"Kibert\u00e1mad\u00e1s \u00e9rte a Dropboxot"},"content":{"rendered":"\n

A Dropbox nyilv\u00e1noss\u00e1gra hozott egy, a rendszerei ellen elk\u00f6vetett s\u00falyos t\u00e1mad\u00e1st, amelynek sor\u00e1n az \u00fcgyfelek szem\u00e9lyes adataihoz \u00e9s illet\u00e9ktelen szem\u00e9lyek f\u00e9rtek hozz\u00e1. A bejelent\u00e9s szerint a vezet\u0151s\u00e9g \u00e1prilis 24-\u00e9n szerzett tudom\u00e1st az incidensr\u0151l, \u00e9s azonnal aktiv\u00e1lta az ilyenkor szok\u00e1sos protokollt \u2013 \u00edrja az IT Business.<\/strong><\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

A t\u00e1mad\u00e1st egy szab\u00e1lyoz\u00f3i bejelent\u00e9sben r\u00e9szletezt\u00e9k, amely a Dropbox Sign-t \u00e9rintette. A t\u00e1mad\u00f3 a Dropbox Sign \u00f6sszes felhaszn\u00e1l\u00f3j\u00e1ra vonatkoz\u00f3 adatokhoz, p\u00e9ld\u00e1ul e-mailekhez \u00e9s felhaszn\u00e1l\u00f3nevekhez, valamint az \u00e1ltal\u00e1nos fi\u00f3kbe\u00e1ll\u00edt\u00e1sokhoz is hozz\u00e1f\u00e9rhetett.<\/p>\n\n\n\n

A felhaszn\u00e1l\u00f3k egy r\u00e9sz\u00e9n\u00e9l telefonsz\u00e1mokhoz, zanz\u00e1s\u00edtott jelszavakhoz \u00e9s bizonyos hiteles\u00edt\u00e9si inform\u00e1ci\u00f3khoz, p\u00e9ld\u00e1ul API-kulcsokhoz, OAuth-tokenekhez \u00e9s t\u00f6bbfaktoros hiteles\u00edt\u00e9shez is hozz\u00e1juthatott a kiberb\u0171n\u00f6z\u0151.<\/p>\n\n\n\n

A v\u00e1llalat nem tal\u00e1lt bizony\u00edt\u00e9kot arra, hogy a t\u00e1mad\u00f3 hozz\u00e1f\u00e9rt a felhaszn\u00e1l\u00f3k fi\u00f3kjainak tartalm\u00e1hoz \u2013 p\u00e9ld\u00e1ul a szerz\u0151d\u00e9seikhez vagy sablonjaikhoz, illetve a fizet\u00e9si adataikhoz \u2013, mindez az\u00e9rt j\u00f3 h\u00edr, mert az alkalmaz\u00e1s val\u00f3sz\u00edn\u0171leg kereskedelmi titkokat rejt\u0151 szerz\u0151d\u00e9sek kezel\u00e9s\u00e9re is haszn\u00e1lhat\u00f3<\/p>\n\n\n\n

Egy m\u00e1sik pozit\u00edvum, hogy a Dropbox szerint a t\u00f6bbi term\u00e9k m\u0171k\u00f6d\u00e9s\u00e9t nem befoly\u00e1solta a t\u00e1mad\u00e1s, hiszen a Dropbox Sign infrastrukt\u00far\u00e1ja nagyr\u00e9szt elk\u00fcl\u00f6n\u00fcl a t\u00f6bbi Dropbox-szolg\u00e1ltat\u00e1st\u00f3l \u2013 \u00edrj\u00e1k a blogbejegyz\u00e9sben.<\/p>\n\n\n\n

A c\u00e9g a vizsg\u00e1lat alapj\u00e1n \u00fagy v\u00e9li, egy harmadik f\u00e9l hozz\u00e1f\u00e9r\u00e9st szerzett az alkalmaz\u00e1s automatiz\u00e1lt rendszerkonfigur\u00e1ci\u00f3s eszk\u00f6z\u00e9hez, \u00edgy siker\u00fclt bejutni a rendszerbe.<\/p>\n\n\n\n

(portfolio.hu)<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

A Dropbox nyilv\u00e1noss\u00e1gra hozott egy, a rendszerei ellen elk\u00f6vetett s\u00falyos t\u00e1mad\u00e1st, amelynek sor\u00e1n az \u00fcgyfelek szem\u00e9lyes adataihoz \u00e9s illet\u00e9ktelen szem\u00e9lyek f\u00e9rtek hozz\u00e1. A bejelent\u00e9s szerint a vezet\u0151s\u00e9g \u00e1prilis 24-\u00e9n szerzett tudom\u00e1st az incidensr\u0151l, \u00e9s azonnal aktiv\u00e1lta az ilyenkor szok\u00e1sos protokollt \u2013 \u00edrja az IT Business.<\/p>\n","protected":false},"author":12,"featured_media":155958,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[41,49,39],"tags":[874],"class_list":["post-155957","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cikkek","category-hirek","category-vilag","tag-kibertamadas"],"_links":{"self":[{"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts\/155957","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=155957"}],"version-history":[{"count":1,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts\/155957\/revisions"}],"predecessor-version":[{"id":155959,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts\/155957\/revisions\/155959"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/media\/155958"}],"wp:attachment":[{"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=155957"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=155957"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=155957"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}