Lenovo has confirmed that a security vulnerability left 36TB of users' data exposed in their Lenovo-EMC network-attached storage devices. Security researchers labelled it "trivially easy" to exploit Lenovo’s API. " In a later statement, referring to the ThinkServer-branded servers issue, the spokesperson added: "The issue with these legacy products has been mitigated since November, with further guidance provided to customers in Security Advisory LEN-23836." -- Vertical Structure reported that 3,030,106 files were left accessible by unauthenticated users, many of which contained sensitive financial information such as credit card numbers and financial records. The company said the issue was fixed on March 31, but did not provide any further details about how users could protect themselves.
Lenovo has confirmed that a security vulnerability left 36TB of users' data exposed in their Lenovo-EMC network-attached storage devices. Security researchers labelled it "trivially easy" to exploit Lenovo’s API. Vertical Structure reported that 3,030,106 files were left accessible by unauthenticated users, many of which contained sensitive financial information such as credit card numbers and financial records. The company said the issue was fixed on March 31, but did not provide any further details about how users could protect themselves.