{"id":4419,"date":"2013-03-01T11:01:38","date_gmt":"2013-03-01T11:01:38","guid":{"rendered":"http:\/\/megahost.ro\/blog\/?p=4419"},"modified":"2013-03-01T11:01:38","modified_gmt":"2013-03-01T11:01:38","slug":"cpanel-lucreaza-intens-pentru-a-remedia-problemele-de-securitate","status":"publish","type":"post","link":"https:\/\/megahost.ro\/blog\/cpanel-lucreaza-intens-pentru-a-remedia-problemele-de-securitate.html","title":{"rendered":"cPanel lucreaza intens pentru a remedia problemele de securitate"},"content":{"rendered":"<p>cPanel, compania care furnizeaza renumitul panou de control pentru web hosting, a emis miercuri o declaratie pe forumurile sale, in care anunta in mod oficial compromiterea sistemului sau, despre care am scris intr-un <a href=\"https:\/\/megahost.ro\/blog\/probleme-de-securitate-ale-celor-de-la-cpanel.html\">articol<\/a> de saptamana trecuta.<\/p>\n<p>In cadrul acestui incident a fost afectat un server proxy utilizat de un numar limitat de angajati ai departamentului tehnic cPanel, pentru a accesa serverele clientilor, in scopul de a oferi asistenta tehnica. Incidentul a fost cauzat de ceea ce compania a descris ca fiind &#8220;un tert rau intentionat.&#8221;<\/p>\n<p>Intre timp, cPanel a spus ca situatia s-a mai stabilizat, mentionand ca se lucreaza intens pentru a remedia problema, iar datele clientilor nu au fost compromise.<\/p>\n<p>Iata declaratia integrala emisa de cPanel pe <a href=\"http:\/\/forums.cpanel.net\/f133\/cpanel-inc-announces-additional-internal-security-enhancements-326702.html\">forumurile<\/a> sale:<\/p>\n<blockquote><p>This is a follow up on the status of the security compromise that cPanel, Inc. experienced on Thursday, February 21, 2013.<\/p>\n<p>As mentioned in our email sent to cPanel Server Administrators who\u2019ve opened a ticket with us in the past 6 months, on February 21 we discovered that one of the proxy servers we utilize in the technical support department had been compromised. The cPanel Security Team\u2019s investigation into this matter is ongoing.<\/p>\n<p>We\u2019d like to relay additional details about the intrusion that we have gathered with you here, and we want to explain what preventative measures we\u2019re putting in place that will introduce additional layers of security to our new and existing systems, already in place.<\/p>\n<p><b>Here\u2019s what we know:<\/b><\/p>\n<ul>\n<li>The proxy machine compromised in this incident was, at the time, utilized to access customer servers by some of our Technical Analysts. It&#8217;s intent was to provide a layer of security between local &amp; remote workstations and customer servers.<\/li>\n<li>This proxy machine was compromised by a malicious third-party by compromising a single workstation used by one of our Technical Analysts.<\/li>\n<li>Only a small group of our Technical Analysts uses this particular machine for logins.<\/li>\n<li>There is no evidence that any sensitive customer data was exposed and there is no evidence that the actual database was compromised.<\/li>\n<\/ul>\n<p>Documentation on how to Determine Your System&#8217;s Status is available and we encourage System Administrators to use those details to determine the status of their servers.<\/p>\n<p><b>Here\u2019s what we\u2019re doing about it:<\/b><\/p>\n<p>We have restructured the process used to access customer servers to significantly reduce the risk of this type of sophisticated attack in the future. We have also been working on implementing multiple changes to our internal support systems and procedures as outlined for your information below.<\/p>\n<ul>\n<li>Our system will now generate and provide you with a unique SSH key for each new support ticket submitted.<\/li>\n<li>We are providing tools to authorize and de-authorize SSH keys and instructions on how to use them whenever you submit a ticket.<\/li>\n<li>Our system will generate a single-use username and password credentials for accessing WebHost Manager that are only valid while our staff is logged into your server.<\/li>\n<li>Additional enhancements are also planned behind the scene that should be transparent to our customers.<\/li>\n<\/ul>\n<p>With these new layers of security in place, it is now possible for our Technical Analysts to service your support requests without you providing your server\u2019s password for nearly all requests involving machines running our cPanel &amp; WHM product going forward. However, we will still offer the ability to provide your password for server migrations, or in the event you cannot use SSH keys.<\/p>\n<p>cPanel\u2019s Internal Development Team has been working on an automated solution with the end goal of eliminating the need for our Technical Analysts to view any passwords you provide during the ticket submission process. We are testing this solution right now, and hope to have it fully implemented in the next few days.<\/p>\n<p>cPanel, Inc. understands your concerns expressed over the last few days, and we very much appreciate the cooperation and patience you have provided us during this time as we work through all of this.<\/p>\n<p>Thank you.<\/p><\/blockquote>\n<p>Intre timp, compania a furnizat in mod constant informatii actualizate despre acest incident catre administratorii de servere dedicate, si a pus in aplicare noi masuri imbunatatite de securitate.<\/p>\n<p>cPanel este lider pe piata de hosting, furnizand software atat pentru furnizorii de web hosting, cat si pentru administratorii de site-uri, permitandu-le sa-si administreze prezenta web utilizand instrumente care le permit sa-si incarce fisiere, sa creeze baze de date, sa configureze conturi de e-mail, impreuna cu o multitudine de alte sarcini.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>cPanel, compania care furnizeaza renumitul panou de control pentru web hosting, a emis miercuri o declaratie pe forumurile sale, in care anunta in mod oficial compromiterea sistemului sau, despre care am scris intr-un articol de saptamana trecuta.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20,5,184],"tags":[57,685,684,690],"class_list":["post-4419","post","type-post","status-publish","format-standard","hentry","category-hosting","category-securitate-online","category-server-dedicat","tag-cpanel","tag-hosting","tag-securitate-online","tag-server-dedicat"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"cPanel, compania care furnizeaza renumitul panou de control pentru web hosting, a emis miercuri o declaratie pe forumurile sale, in care anunta in mod oficial compromiterea sistemului sau, despre care am scris intr-un articol de saptamana trecuta.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Istrator Admin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/megahost.ro\/blog\/cpanel-lucreaza-intens-pentru-a-remedia-problemele-de-securitate.html\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"cPanel lucreaza intens pentru a remedia problemele de securitate | megahost.ro","description":"cPanel, compania care furnizeaza renumitul panou de control pentru web hosting, a emis miercuri o declaratie pe forumurile sale, in care anunta in mod oficial compromiterea sistemului sau, despre care am scris intr-un articol de saptamana trecuta.","canonical_url":"https:\/\/megahost.ro\/blog\/cpanel-lucreaza-intens-pentru-a-remedia-problemele-de-securitate.html","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null},"aioseo_meta_data":{"post_id":"4419","title":"cPanel lucreaza intens pentru a remedia problemele de securitate | megahost.ro","description":"cPanel, compania care furnizeaza renumitul panou de control pentru web hosting, a emis miercuri o declaratie pe forumurile sale, in care anunta in mod oficial compromiterea sistemului sau, despre care am scris intr-un articol de saptamana trecuta.","keywords":[{"label":"cPanel","value":"cPanel"},{"label":"server dedicat","value":"server dedicat"},{"label":"hosting","value":"hosting"},{"label":"web hosting","value":"web hosting"},{"label":"securitate online","value":"securitate online"}],"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"location":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2020-12-20 22:31:09","updated":"2025-06-04 02:30:37","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/megahost.ro\/blog\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/megahost.ro\/blog\/category\/securitate-online\" title=\"Securitate Online\">Securitate Online<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tcPanel lucreaza intens pentru a remedia problemele de securitate\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/megahost.ro\/blog\/"},{"label":"Securitate Online","link":"https:\/\/megahost.ro\/blog\/category\/securitate-online"},{"label":"cPanel lucreaza intens pentru a remedia problemele de securitate","link":"https:\/\/megahost.ro\/blog\/cpanel-lucreaza-intens-pentru-a-remedia-problemele-de-securitate.html"}],"_links":{"self":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts\/4419","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/comments?post=4419"}],"version-history":[{"count":0,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts\/4419\/revisions"}],"wp:attachment":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/media?parent=4419"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/categories?post=4419"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/tags?post=4419"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}