[Fiware-support] FW: private documents visible

[Farkas, Lorant (NSN - HU/Budapest)]

> ______________________________________________ 
> From: 	Bisztray, Denes (NSN - HU/Budapest)  
> Sent:	Friday, September 23, 2011 3:07 PM
> To:	fiware-support at lists.fi-ware.eu
> Cc:	Farkas, Lorant (NSN - HU/Budapest)
> Subject:	private documents visible
> 
> Hi,
> 
>    The supposedly private documents are still reachable from outside. If you search google for keywords from the docs, it finds them and gives you the link. I believe this is a SERIOUS security problem, please resolve it ASAP. 
> 
> Evidence:
> 
> 1.	Search for Cumulocity NSN:
> http://www.google.fi/#sclient=psy-ab&hl=hu&source=hp&q=Cumulocity+NSN&pbx=1&oq=Cumulocity+NSN&aq=f&aqi=&aql=1&gs_sm=e&gs_upl=4279l4899l2l5159l4l3l0l0l0l0l224l428l2-2l3l0&bav=on.2,or.r_gc.r_pw.&fp=9a24604d477dfd8&biw=1373&bih=728 <http://www.google.fi/> 
> 
> The third from the bottom is the PRIVATE supposedly not visible Architecture document. 
> 
> 2.	Trying it with IDAS Telefónica its even worse:
> http://www.google.fi/#sclient=psy-ab&hl=hu&source=hp&q=IDAS+Telef%C3%B3nica&pbx=1&oq=IDAS+Telef%C3%B3nica&aq=f&aqi=&aql=1&gs_sm=e&gs_upl=49626l52101l0l52294l15l12l0l0l0l0l303l2660l0.1.9.1l11l0&bav=on.2,or.r_gc.r_pw.&fp=9a24604d477dfd8&biw=1373&bih=728 <http://www.google.fi/> 
>   It> '> s the third from the top. 
> 
> Best,
> Dénes Bisztray
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-support/attachments/20110923/565edfa5/attachment.html>