Attack in progressA leaked CI key of ‹ci-deploy-bot› is being used to break in: 6 accounts and machines created.Open the case
Resource: ‹arn:aws:eks:eu-west-1:123456789012:cl…(52 chars)›
What Warden knows about this thing and how it knows it, what could reach it, and every flaw it has had.
What it is and where
cluster in acct-prod, eu-west-1
e/G3pkd69zF94G
What is known about its software
Only the versions of its platform are known.
What that source can answer for
- the platform it runs on: can say a flaw does not apply
Exposure and power
- It can only be reached from inside.
- Its role can become an administrator, or reach something critical.
The changes that fix it
Matches
| Advisory | Band | Confidence | Runs | Fixed in | Exploited |
|---|---|---|---|---|---|
WD-DEMO-0005 Demo: fictional advisory | Plan | confirmed | ‹1.29› | ‹1.32.0› | none known |
End of support
- Kubernetes version support: it is in extended support, which adds about USD 365 a month; standard support ends 3 August; extended support ends 9 July; AWS gives these dates.
Pending AWS updates
No update is pending.
History
WD-DEMO-0005Demo: fictional advisory: First seen 14 July 11:00 UTC. Still reported by the scanner.
Exceptions
No exception is in force for it.