Hack Forums
Cloudflare - CloudBleed HTTPS traffic leak - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: The Lounge (https://hackforums.net/forumdisplay.php?fid=25)
+---- Thread: Cloudflare - CloudBleed HTTPS traffic leak (/showthread.php?tid=5559375)



Cloudflare - CloudBleed HTTPS traffic leak - Ainaj - Feb 23, 2017

Quote:Between 2016-09-22 - 2017-02-18 passwords, private messages, API keys, and other sensitive data were leaked by Cloudflare to random requesters. Data was cached by search engines, and may have been collected by random opponents over the past few months.

"The greatest period of impact was from February 13 and February 18 with around 1 in every 3,300,000 HTTP requests through Cloudflare potentially resulting in memory leakage (that's about 0.00003% of requests), potential of 100k-200k paged with private data leaked every day" - source


https://github.com/pirate/sites-using-cloudflare
https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/
https://www.reddit.com/r/sysadmin/comments/5vu3yn/cloudbleed_seceurity_bug_cloudflare_reverse/


This data leak affects EVERY SITE THAT USES CLOUDFLARE, WHEREVER OR NOT IT USES SSL

Time to change your passwords bois


Mothdafucker beat me to posting by 20 seconds. Will close this