Attack in progressA leaked CI key of ‹ci-deploy-bot› is being used to break in: 6 accounts and machines created.Open the case
Resource: ‹i-0a1b2c3d4e5f60718›
What Warden knows about this thing and how it knows it, what could reach it, and every flaw it has had.
What it is and where
instance in acct-prod
e/57dH2jqq3zW4
What is known about its software
Its operating system packages were listed by the instance.
These were reported by the instance itself.
Read by SSM inventory at 12 September 07:00 UTC, 3 hours ago.
What that source can answer for
- Debian and Ubuntu packages: can say a flaw does not apply
Exposure and power
- It can only be reached from inside.
- Its role can do little.
The changes that fix it
No change is waiting for it.
Matches
| Advisory | Band | Confidence | Runs | Fixed in | Exploited |
|---|---|---|---|---|---|
WD-DEMO-0011 Demo: fictional advisory | Long tail | confirmed | ‹2[.]4-1ubuntu1[.]1› | ‹2[.]4-1ubuntu1[.]2› | none known |
End of support
No end of support is recorded.
Pending AWS updates
No update is pending.
History
WD-DEMO-0011Demo: fictional advisory: First seen 31 August 11:00 UTC. Still reported by the scanner.WD-DEMO-0100Demo: fictional advisory: First seen 3 August 10:00 UTC. Last seen affected 3 August 10:00 UTC. Fixed 10 August 10:00 UTC: the package list shows the fixed version. It ran‹1.0.0›; it now runs‹1.0.2›.
Exceptions
No exception is in force for it.