Nissan Connect 3 Torrent Password Of Adminadmin

Nissan Connect 3 Torrent Password Of Adminadmin

IT expert Tillie Kottmann was the first to discover that the automaker, for some reason, left an active account on its Git server by default with a login and password of adminadmin.

Kottmann explained that the full dump with a leak of all Git Repos from Nissan NA is 18.4 GB, it includes the following source code and development of the company: Nissan NA mobile applications; elements and diagnostic tools ASIST; components of dealer business systems and dealer portal; the main module of the Nissan mobile library; diagnostic utilities and services of Nissan Infiniti - NCAR ICAR; tools for attracting and retaining customers; marketing tools, including sales analysis, market research, as well as data obtained with their help; transport logistics portal; service for connecting various devices to the car - Nissan connect things; server backends and internal company tools.

Leaked Nissan data.

A link to a torrent file with this leak was published on Telegram channels and on hacker forums.

Kottmann had a quick look at the data and found that in the ASIST diagnostic system, the password is encrypted using the RC4 algorithm with a single key Amalesh.

Nissan also disabled the Git server to minimize further problems with the disclosure of Nissans confidential information and source code.

Last May, Tilly Kottmann was able to download the source codes of the smart car components installed in the Mercedez-Benz minibusses.

It turned out that Daimler allowed any user to register with one of their local GitLab servers, and then it was possible to download Git repositories containing the Mercedes source code.

Reproduction in whole or in part without permission is prohibited.

Kottmann, who learned of the leak from an anonymous source and analyzed the Nissan data on Monday, said the Git repository contained the source code of: Nissan NA Mobile apps some parts of the Nissan ASIST diagnostics tool the Dealer Business Systems Dealer Portal Nissan internal core mobile library NissanInfiniti NCARICAR services client acquisition and retention tools sale market research tools data various marketing tools the vehicle logistics portal vehicle connected services Nissan connect things and various other backends and internal tools.

Nissan conducted an immediate investigation regarding improper access to proprietary company source code.

We take this matter seriously and are confident that no personal data from consumers, dealers or employees was accessible with this security incident.

The affected system has been secured, and we are confident that there is no information in the exposed source code that would put consumers or their vehicles at risk, the Nissan rep told ZDNet in an email.

The Swiss researchers received a tip about Nissans Git server after they found a similarly misconfigured GitLab server in May 2020 that leaked the source code of various Mercedes Benz apps and tools.

Updated on January 7 at 21:00 ET with new statement from Nissan North America.

You also agree to the Terms of Use and acknowledge the data collection and usage practices outlined in our Privacy Policy.