Attack in progressA leaked CI key of ‹ci-deploy-bot› is being used to break in: 6 accounts and machines created.Open the case
Resource: ‹arn:aws:ecr:eu-west-1:123456789012:re…(58 chars)›
What Warden knows about this thing and how it knows it, what could reach it, and every flaw it has had.
What it is and where
image in acct-prod, eu-west-1
e/J7VxCMHwFDqo
What is known about its software
Only a scanner's findings are known.
Read by Inspector at 12 September 04:00 UTC, 6 hours ago.
What that source can answer for
- JavaScript packages: can only say it reports none
Exposure and power
- It can be reached from the internet.
- Its role can read or change data.
Reached through: e/GSvxxLa1QTMn. See the Risks page
The changes that fix it
Matches
| Advisory | Band | Confidence | Runs | Fixed in | Exploited |
|---|---|---|---|---|---|
WD-DEMO-0004 Demo: fictional advisory | Fix now | confirmed | ‹3.2.0› | ‹3.2.1› | none known |
End of support
No end of support is recorded.
Pending AWS updates
No update is pending.
History
WD-DEMO-0004Demo: fictional advisory: First seen 11 September 07:00 UTC. Still reported by the scanner.
Exceptions
No exception is in force for it.