PHP flaw prompts Japanese prefectures, JR Shikoku and firms to suspend website services
In short
After a serious vulnerability was found in the PHP programming language, Ehime and Fukuoka prefectures and JR Shikoku suspended parts of their websites on 22 October. Fukuoka said the step is precautionary and that no unauthorized access or effect on prefectural operations has been confirmed. Nishi-Nippon Shimbun and Nippon TV headlines also list banks, Nishitetsu and Daimaru among those affected.
Read the full story 1 min read
A vulnerability described as a serious system flaw was found in the programming language PHP, and on 22 October several organizations in Japan suspended parts of their websites, according to Nippon TV and Sankei Shimbun. [ 1 , 3 ]
Ehime Prefecture said it is carrying out an emergency inspection of the target servers and applying a fix program to secure its homepage. It has temporarily suspended some content and services, including the event calendar and the survey submission function on pages. Nippon TV also reported that JR Shikoku is suspending viewing of its official website and some services for security. [ 1 ]
Fukuoka Prefecture announced on 22 October that it had suspended some functions of its official website from the morning, as a precaution until a fix program is applied. According to Sankei, the suspended functions include the event calendar, category-based search for bids and public solicitations, and survey submission. The prefecture plans an emergency inspection of the target servers. It said no unauthorized access from outside and no effect on prefectural operations have been confirmed. [ 3 ]
Headlines from Nippon TV and Nishi-Nippon Shimbun say website services were suspended one after another in Fukuoka, naming the prefecture, Nishi-Nippon City Bank, Nishitetsu and Daimaru. A later Nishi-Nippon Shimbun headline says JR Shikoku temporarily suspended its site and that operation information was affected. No article text is available for these reports. [ 2 , 4 , 5 ]
Why it matters
The reports show a flaw in a widely used programming language leading public bodies and companies in western Japan to take services offline as a precaution. The documents do not say how long the suspensions will last.
Key facts
- A vulnerability described as a serious system flaw was found in the programming language PHP. [ 1 , 3 ]
- Ehime Prefecture is conducting an emergency inspection of target servers and applying a fix program, and has temporarily suspended some content and services, including the event calendar and survey submission functions. [ 1 ]
- Fukuoka Prefecture announced on 22 October that it had suspended some functions of its official website from the morning, as a precaution until a fix is applied. [ 3 ]
- Fukuoka said no unauthorized access from outside and no effect on prefectural operations have been confirmed. [ 3 ]
- JR Shikoku is suspending viewing of its official website and some services to secure security; a Nishi-Nippon Shimbun headline says train operation information was affected. [ 1 , 5 ]
- Headlines list Nishi-Nippon City Bank, Nishitetsu, Daimaru and others in Fukuoka as also affected by website service suspensions. [ 2 , 4 ]
Confirmed by several sources
Still unclear
- How long the suspensions will last. The documents say Fukuoka's measure lasts until a fix is applied but give no restoration time for any organization.
- The extent of the effect on JR Shikoku's operation information. Only a Nishi-Nippon Shimbun headline mentions an effect on operation information; the article text is not available.
- Details of the suspensions at banks, Nishitetsu and Daimaru. They appear only in headlines, with no article text.
What local media are saying
Timeline, local time
- Nippon TV reports Ehime Prefecture's emergency inspection and partial suspension, and JR Shikoku's suspension of website viewing and some services. [ 1 ]
- Nippon TV reports website service suspensions in Fukuoka, including the prefecture, banks and Daimaru. [ 2 ]
- Sankei reports Fukuoka Prefecture's announcement of a partial website suspension. [ 3 ]
- Nishi-Nippon Shimbun reports the Fukuoka suspension and that Nishi-Nippon City Bank and Nishitetsu are also affected. [ 4 ]
- Nishi-Nippon Shimbun reports JR Shikoku's temporary site suspension and an effect on operation information. [ 5 ]