Elasticsearch and/or Kibana is currently open without authentication.
This results in all the database data made available publicly.
Severity: high
Fingerprint: 831cb76b8e05df46f99e36e7242270f99d184ffb9d184ffb9d184ffb9d184ffb
Indices: 1, document count: 1, size: 4.6 kB Through Kibana endpoint Found index read_me with 1 documents (4.6 kB)
Severity: medium
Fingerprint: 831cb76b8e05df464074fd3cae07ecfc0f9ef817725adb1045dae22f7665894d
Indices: 8, document count: 10, size: 52.1 kB Through Kibana endpoint Found index v2 with 2 documents (13.9 kB) Found index api with 1 documents (7.1 kB) Found index lili_goods with 0 documents (283 B) Found index admin with 1 documents (4.9 kB) Found index v1 with 3 documents (13.2 kB) Found index lili_logs with 0 documents (283 B) Found index read_me_to_recover_database with 1 documents (5.1 kB) Found index auth with 2 documents (7.1 kB)
Severity: medium
Fingerprint: 831cb76b8e05df46005baed921059f5b7ec0396a02e391cb34c1bbbe0313e25f
Indices: 5, document count: 5, size: 26.4 kB Through Kibana endpoint Found index read-me-hacked-by-nightlionsecurity-h336hp with 1 documents (5.3 kB) Found index read-me-hacked-by-nightlionsecurity-ovbuh0 with 1 documents (5.3 kB) Found index read-me-hacked-by-nightlionsecurity-d5uvom with 1 documents (5.3 kB) Found index read-me-hacked-by-nightlionsecurity-mawdkk with 1 documents (5.3 kB) Found index read-me-hacked-by-nightlionsecurity-dhtilm with 1 documents (5.3 kB)
Elasticsearch and/or Kibana is currently open without authentication.
Additionaly a ransom note has been found in the dataset which indicates it has been compromised
This results in all the database data made available publicly.
Severity: high
Fingerprint: 831cb76b8e05df46f99e36e7d4075051d4075051d4075051d4075051d4075051
Indices: 1, document count: 1, size: 4.6 kB Found index read_me with 1 documents (4.6 kB)
Severity: medium
Fingerprint: 831cb76b8e05df464074fd3cf2d406d75a55e750ea9ba3ef8d9360faa2c8be8d
Indices: 8, document count: 10, size: 52.1 kB Found index v2 with 2 documents (13.9 kB) Found index api with 1 documents (7.1 kB) Found index lili_goods with 0 documents (283 B) Found index admin with 1 documents (4.9 kB) Found index v1 with 3 documents (13.2 kB) Found index lili_logs with 0 documents (283 B) Found index read_me_to_recover_database with 1 documents (5.1 kB) Found index auth with 2 documents (7.1 kB)
Severity: medium
Fingerprint: 831cb76b8e05df46005baed9ff2f243c781b71817ce4207468cd489018aa8f69
Indices: 5, document count: 5, size: 26.4 kB Found index read-me-hacked-by-nightlionsecurity-h336hp with 1 documents (5.3 kB) Found index read-me-hacked-by-nightlionsecurity-ovbuh0 with 1 documents (5.3 kB) Found index read-me-hacked-by-nightlionsecurity-d5uvom with 1 documents (5.3 kB) Found index read-me-hacked-by-nightlionsecurity-mawdkk with 1 documents (5.3 kB) Found index read-me-hacked-by-nightlionsecurity-dhtilm with 1 documents (5.3 kB)
Severity: medium
Fingerprint: 831cb76b8e05df46b8c6b73443c40810d6f0b085d16e705bd16e705bd16e705b
Indices: 3, document count: 13, size: 83.3 kB Found index .kibana_task_manager with 2 documents (22.0 kB) Found index .kibana_1 with 7 documents (47.7 kB) Found index website with 4 documents (13.7 kB)
Open service 121.40.41.188:22
2024-02-19 03:44
Open service 121.40.41.188:22
2024-02-15 13:37