Elasticsearch server with no password or encryption leaks a million records

Researchers at security product recommendation service Safety Detectives claim they’ve found almost a million customer records wide open on an Elasticsearch server run by Malaysian point-of-sale software vendor StoreHub. Safety Detectives’ report states it found a StoreHub sever that stored unencrypted data and was not password protected.

Read full article on The Register

 


Date:

Categorie(s):