Infrastructure · Code · first seen 14 Oct · CWE-284
HighLikelyOpenPlatformfix by 13 Nov
Open · Platform's
It's Platform's, but no one has picked it up.
One problem in one place, found by code.
1 source · 1 place
Code
tf/do-firewall-open-ingress · commit 3b9d0aa by Tunde
What closes it
Nobody can mark it fixed by hand. A person submits the fix; a scan or a retest decides it.
15th of 39 in your queue
Proof first, then exploitation in the wild, a public exploit, EPSS and severity, adjusted for exposure and how much the asset matters
Priority
56 / 100
What each source saw
As each source gives it · secrets, keys and card numbers stay masked
The code · tessellate/infra
Open the repositorymodules/metrics/firewall.tf
| 9 | inbound_rule { |
| 10 | protocol = "tcp" |
| 11 | port_range = "3000" |
| 12 | source_addresses = ["0.0.0.0/0", "::/0"] |
| 13 | } |
Opens metrics.tessellatepay.com to the internet
Our scan found port 3000 open and Grafana 10.2.2 answering on it.
See the hostThe fix
Allow only the VPN's address range on 3000, and reach Grafana through nginx on 443 behind your SSO.
What happened, and what was said
1 event · 0 comments · oldest first
One finding belongs with this one
The same story from another source: fix them together