FitMetrix user data exposed via passwordless ElasticSearch server cluster

guest · Oct 11, 2018

FitMetrix user data exposed via passwordless ElasticSearch server cluster
Exact number of affected users is unknown but the server cluster is now secure
October 11, 2018
https://www.zdnet.com/article/fitme...ia-passwordless-elasticsearch-server-cluster/

Data for an unknown number of FitMetrix users was left exposed on the Internet via a cluster of ElasticSearch servers, a security researcher has discovered.

The servers, which were not secured with an access password, allowed anyone knowing their IP address to access a trove of information, some of which contained the personal data of FitMetrix users.

The exposed FitMetrix server cluster was discovered by Bob Diachenko, Director of Cyber Risk Research at cyber-security firm Hacken.

Additionally, the researcher also says the servers exposed an API key that seemed to be used for managing the FitMetrix server infrastructure.
Click to expand...

Log in or Sign up

FitMetrix user data exposed via passwordless ElasticSearch server cluster

guest Guest

Log in or Sign up

FitMetrix user data exposed via passwordless ElasticSearch server cluster

guest Guest

Useful Searches