• Creation
  • Validation
  • Communication & fix
  • Disclosure

LG Inform Plus / Elasticsearch cluster exposing PII

BloodyShell reported 2021-10-29

Some indices contain internal emails from @local.gov.uk and others.

IP:
34.243.213.179
Port:
9200
Detected protocol:
elasticsearch
Vulnerable URL:
http://34.243.213.179:9200
Indices: 32, document count: 1742455, size: 1.5 GB
Found index alpha.lginform402bdd400dddf5732fbb460dc3af9fc0 with 7263 documents (10.4 MB)
Found index alpha.fog with 91585 documents (48.0 MB)
Found index beta.reports with 5935 documents (5.4 MB)
Found index alpha.metrics with 9143 documents (15.3 MB)
Found index alpha.complexmetrics with 12702 documents (89.8 MB)
Found index dev.files with 20 documents (222.7 kB)
Found index beta.centralareas with 347422 documents (241.3 MB)
Found index .kibana with 1 documents (3.8 kB)
Found index dev.lginform402bdd400dddf5732fbb460dc3af9fc0 with 15253 documents (22.1 MB)
Found index dev.metrics with 12969 documents (20.6 MB)
Found index livevfm.lginform215740439e7c16acd06e9bf234e81275 with 1381 documents (2.1 MB)
Found index reportsearchfields with 0 documents (1.3 kB)
Found index beta.standards with 30000 documents (29.3 MB)
Found index local.lginform582eab0e2ee9d1c4dbf677ac101ff4ce with 10599 documents (13.9 MB)
Found index fog with 94808 documents (78.5 MB)
Found index beta.complexmetrics with 15674 documents (73.1 MB)
Found index complexmetrics with 16209 documents (103.6 MB)
Found index beta.files with 11184 documents (7.4 MB)
Found index uat.lginform582eab0e2ee9d1c4dbf677ac101ff4ce with 12702 documents (16.8 MB)
Found index beta.metrics with 15674 documents (34.1 MB)
Found index dev.reports with 5813 documents (5.5 MB)
Found index centralareas with 459439 documents (356.5 MB)
Found index standards with 34744 documents (33.3 MB)
Found index alphavfm.lginformc09e35d4f6333ae4d944513c078ec89d with 684 documents (1.1 MB)
Found index alpha.areas with 182391 documents (74.6 MB)
Found index live.lginform402bdd400dddf5732fbb460dc3af9fc0 with 17500 documents (42.2 MB)
Found index reports with 6444 documents (6.0 MB)
Found index betavfm.lginform215740439e7c16acd06e9bf234e81275 with 1366 documents (2.1 MB)
Found index {{index}} with 1 documents (3.7 kB)
Found index metrics with 16209 documents (39.7 MB)
Found index files with 13576 documents (9.9 MB)
Found index areas with 293764 documents (110.6 MB)
Found by ElasticSearchExplorePlugin 2021-10-29
Report created by BloodyShell  2021-10-29
Report approved by BloodyShell  2021-10-29
New PDF report generated by system 2021-10-29
Report dispatched to ...@... by system 2021-10-29
Report dispatched to ...@... by system 2021-10-29
Report marked as fixed by BloodyShell  2021-10-30
Report edited by BloodyShell  2021-10-30
New PDF report generated by system 2021-10-30
Report closed by BloodyShell  2021-10-30
New PDF report generated by system 2021-10-30
Report edited by BloodyShell  2021-10-31
New PDF report generated by system 2021-10-31
Information
Owner LG Inform Plus
Created 2021-10-29 16:44
Updated 2021-10-31 13:57
Fixed true

Contacts
s...@esd.org.uk
i...@porism.com

Status
Status closed
Hosting contacted false
CERT contacted false

Download report