[Fiware-support] private documents visible

Bisztray, Denes (NSN - HU/Budapest) denes.bisztray at nsn.com
Fri Sep 23 15:07:06 CEST 2011


Hi,

   The supposedly private documents are still reachable from outside. If you search google for keywords from the docs, it finds them and gives you the link. I believe this is a SERIOUS security problem, please resolve it ASAP. 

Evidence:

1.	Search for Cumulocity NSN:
http://www.google.fi/#sclient=psy-ab&hl=hu&source=hp&q=Cumulocity+NSN&pbx=1&oq=Cumulocity+NSN&aq=f&aqi=&aql=1&gs_sm=e&gs_upl=4279l4899l2l5159l4l3l0l0l0l0l224l428l2-2l3l0&bav=on.2,or.r_gc.r_pw.&fp=9a24604d477dfd8&biw=1373&bih=728 <http://www.google.fi/> 

The third from the bottom is the PRIVATE supposedly not visible Architecture document. 

2.	Trying it with IDAS Telefónica its even worse:
http://www.google.fi/#sclient=psy-ab&hl=hu&source=hp&q=IDAS+Telef%C3%B3nica&pbx=1&oq=IDAS+Telef%C3%B3nica&aq=f&aqi=&aql=1&gs_sm=e&gs_upl=49626l52101l0l52294l15l12l0l0l0l0l303l2660l0.1.9.1l11l0&bav=on.2,or.r_gc.r_pw.&fp=9a24604d477dfd8&biw=1373&bih=728 <http://www.google.fi/> 
  It's the third from the top. 

Best,
Dénes Bisztray

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-support/attachments/20110923/62ee5e24/attachment.html>


More information about the Fiware-support mailing list

You can get more information about our cookies and privacy policies clicking on the following links: Privacy policy   Cookies policy