Misconfigured Google Calendars Share Events With the World

guest · Sep 17, 2019

Misconfigured Google Calendars Share Events With the World
September 17, 2019
https://www.bleepingcomputer.com/ne...google-calendars-share-events-with-the-world/

Thousands of Google users are exposing the contents of their calendars to the public. The information is indexed by search engines and can include email addresses as well as private events from individuals and businesses.
The problem is due to misconfiguring Google Calendar to share its contents with others. However, making the data public means that anyone with your Calendar link can access it.

Finding if a specific calendar is openly accessible is as easy as running a particular query that includes the owner's email address, the researcher discloses in a blog post today. Uncovering all open calendars indexed by Google requires a more general search: [...]
Avinash told BleepingComputer that he disclosed the issue to Google, but the company replied that this is how the product is intended to work, so it is up to users to protect their data.

A solution is to set your calendar to share minimum information about your schedule, disclosing only if you're busy or available. This is particularly recommended to GSuite admins who handle the calendars of people in an organization.
Click to expand...

Ok Google! Please reveal everyone’s public calendar

I was able to access public calendars of various organizations leaking out sensitive details like their email ids, their event name, event details, location, meeting links, zoom meeting links, google hangout links, internal presentation links and much more.
Various calendars belonged to many of the top 500 Alexa company’s employees as well, which intentionally/unintentionally were made public by the employee themselves.
Click to expand...

Log in or Sign up

Misconfigured Google Calendars Share Events With the World

guest Guest

Log in or Sign up

Misconfigured Google Calendars Share Events With the World

guest Guest

Useful Searches