Confluence-based wiki systems
2022-06-16
Dear colleagues and students,
The Confluence-based wiki systems mywiki.leuphana.de and lehrwiki.leuphana.de are now available again. Due to a security vulnerability in the software, the systems had to be temporarily shut down in order to perform the necessary software updates.
During the subsequent analysis of the system, we found that the system had already been attacked before the security vulnerability was published. We therefore completely rebuilt the systems and carefully examined them for security-relevant aspects.
We reasonably assume that the attacks on the systems were intended to expand so-called botnets, i.e. that there was no interest in the stored data. Nevertheless, we cannot completely rule out the possibility that unauthorised persons were able to access protected contents of the wikis. We therefore ask all users of the systems to check their content for the consequences of a potential leak of their information and to react accordingly.
For our part, we have reset 228 Leuphana accounts with which users logged into the Confluence systems during the period in question. Affected users are kindly requested to contact the IT Service by phone at -1212 or our accounting-team by (private) e-mail at accounting@leuphana.de.
Thank you for your understanding!
Best regards,
Your MIZ team