Infrastructure · Code · first seen 3 Oct · CWE-284
MediumLikelyOpenPlatformfix by 2 Dec
Open · Platform's
It's Platform's, but no one has picked it up.
One problem in one place, found by code.
1 source · 1 place
Code
tf/aws-sg-open-ssh · commit 6c02f1d by Tunde
What closes it
Nobody can mark it fixed by hand. A person submits the fix; a scan or a retest decides it.
29th of 39 in your queue
Proof first, then exploitation in the wild, a public exploit, EPSS and severity, adjusted for exposure and how much the asset matters
Priority
38 / 100
What each source saw
As each source gives it · secrets, keys and card numbers stay masked
The code · tessellate/infra
Open the repositoryenvs/staging/main.tf
| 41 | ingress { |
| 42 | from_port = 22 |
| 43 | to_port = 22 |
| 44 | cidr_blocks = ["0.0.0.0/0"] |
| 45 | } |
Opens staging.tessellatepay.com to the internet
Our scan found port 22 open, OpenSSH 9.6p1.
See the hostThe fix
Allow 22 only from the VPN, or drop it and use AWS Systems Manager to get in.
What happened, and what was said
1 event · 0 comments · oldest first
One finding belongs with this one
The same story from another source: fix them together