Missing protection · Scan · first seen 1 Oct
HighLikelyOpenPlatformfix by 31 Oct
Open · Platform's
It's Platform's, but no one has picked it up.
One problem in six places, found by scan.
2 sources · 6 places
Scan
First found Thu 1 Oct, last seen Mon 12 Oct
First found Thu 1 Oct, last seen Thu 15 Oct
What closes it
Nobody can mark it fixed by hand. A person submits the fix; a scan or a retest decides it.
12th of 39 in your queue
Proof first, then exploitation in the wild, a public exploit, EPSS and severity, adjusted for exposure and how much the asset matters
Priority
60 / 100
What each source saw
As each source gives it · secrets, keys and card numbers stay masked
The scan's case file · tessellatepay.com
See it in that scanWhat we saw, on 4 hosts
The response from https://vpn.tessellatepay.com has no HSTS header.
The fix
Add the header at your edge (Cloudflare can set it for every host at once) or in the app.
Where
What happened, and what was said
1 event · 0 comments · oldest first