Shandong mobile has unauthorized mongodb access, causing a large amount of user information leakage.

Shandong mobile has unauthorized mongodb access, causing a large amount of user information leakage.

Shandong mobile has unauthorized mongodb access, causing a large amount of user information leakage (mobile phone number \ IMSI number \ coordinate latitude and longitude \ specific physical location \ System query account plaintext password)

A vulnerability in Shandong mobile caused a large amount of user information leakage (mobile phone number \ IMSI number \ coordinate latitude and longitude \ specific physical location)

You can see the positioning accuracy of mobile itself, in what Street, near the intersection .....

A website of Shandong mobile has unauthorized access to mongodb.



Vulnerability site IP Address :**.**.**.**



You can directly access the database information:
 

IMSI numbers and locations of a large number of users:
 

System query account plaintext password:


 

The login address for the Account query is: **. **: 8068/sdwztPIS/wztserver


 

User coordinates:


 

 

 

 

 

Solution: