GeneralInformation

Hostnames	latinamericabeverages.pepsico.com www.latinamericabeverages.pepsico.com
Domains	pepsico.com
Cloud Provider	Azure
Cloud Service	AzureAppService
Country	United States
City	San Antonio
Organization	Microsoft Corporation
ISP	Microsoft Corporation
ASN	AS8075
Operating System	Windows

WebTechnologies

Editors

JavaScript libraries

UI frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

80 443

-1649230294 | 2024-04-19T16:01:10.620481

80 / tcp

HTTP/1.1 200 OK
Content-Length: 1195
Content-Type: text/html
Date: Fri, 19 Apr 2024 16:01:10 GMT
Server: Microsoft-IIS/10.0
Accept-Ranges: bytes
ETag: "5b7d9b22bb79d21:0"
Last-Modified: Sat, 28 Jan 2017 23:06:19 GMT
Set-Cookie: ARRAffinity=9c0f63a5e0c13b14d784e22b8c34a9126c5699a1e135b9bef0a91641c62a97af;Path=/;HttpOnly;Domain=theheads.azurewebsites.net
X-Powered-By: ASP.NET

653529306 | 2024-04-19T16:50:08.110384

443 / tcp

HTTP/1.1 200 OK
Content-Length: 5055
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Apr 2024 16:50:06 GMT
Server: Microsoft-IIS/10.0
Cache-Control: private
Set-Cookie: ARRAffinity=8725aa7e4723c070173be41a9f2e45c7df3507b2eb26f16f6d0237a1ddc3de23;Path=/;HttpOnly;Secure;Domain=www.latinamericabeverages.pepsico.com
Set-Cookie: ARRAffinitySameSite=8725aa7e4723c070173be41a9f2e45c7df3507b2eb26f16f6d0237a1ddc3de23;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.latinamericabeverages.pepsico.com
X-AspNetMvc-Version: 5.2
X-Powered-By: ASP.NET

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ed:c4:5d:5b:a8:37:24:51:50:ad:a7:9d:1a:07:29
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K
        Validity
            Not Before: May 30 04:00:29 2023 GMT
            Not After : Jun 26 04:00:29 2024 GMT
        Subject: C=US, ST=Texas, L=Plano, O=Pepsico Inc, CN=latinamericabeverages.pepsico.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:0a:36:29:b3:47:e9:0f:5a:28:8f:67:b0:
                    b8:fb:f3:0f:a8:21:7c:3b:b0:c2:3e:1d:36:e5:48:
                    c1:86:b9:53:11:7c:90:a6:87:44:66:60:da:e4:88:
                    6e:0f:6f:e4:9e:6a:d2:e6:ed:4d:da:29:e2:94:7d:
                    6b:d1:7c:ab:35:a4:4a:a3:a1:1a:a0:fd:fb:63:cd:
                    0e:be:67:1f:59:cf:76:5c:05:a3:95:78:2b:fa:db:
                    42:8f:36:b3:9a:4e:90:fc:92:da:fa:c9:fd:d6:03:
                    6a:12:95:6b:ba:47:ba:99:f9:db:ea:f8:72:63:5b:
                    75:13:bb:d4:f4:06:ba:4e:e7:ea:24:98:90:02:13:
                    d6:86:40:6b:3a:21:63:ea:51:76:5f:f6:ab:43:49:
                    48:d0:42:56:9d:03:14:84:f6:95:19:0d:18:44:97:
                    9e:44:98:17:82:1b:7e:11:b9:d8:a3:d9:4f:63:da:
                    f5:a3:48:b4:47:43:7e:00:59:e8:25:c1:e4:38:8e:
                    b8:94:f4:06:be:ac:65:1c:4d:71:13:15:3f:5f:62:
                    53:a3:e4:c5:fe:a8:21:6e:94:74:e5:34:7c:19:91:
                    a0:fe:11:e6:f3:16:be:d9:4c:b9:9d:61:4d:27:37:
                    f2:ab:80:10:55:ec:c0:66:b8:e4:ea:df:c2:ab:8f:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                B4:BD:9C:92:56:97:8D:E0:9D:F8:A0:99:61:6B:B6:D0:CA:38:CE:27
            X509v3 Authority Key Identifier: 
                82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF
            Authority Information Access: 
                OCSP - URI:http://ocsp.entrust.net
                CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.entrust.net/level1k.crl
            X509v3 Subject Alternative Name: 
                DNS:latinamericabeverages.pepsico.com, DNS:www.latinamericabeverages.pepsico.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114028.10.1.5
                  CPS: https://www.entrust.net/rpa
                Policy: 2.23.140.1.2.2
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : May 30 04:00:30.050 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:CE:D0:6D:FF:5F:E6:1D:E6:C4:5E:C1:
                                10:38:4E:BA:63:17:04:61:05:23:EA:C7:0E:42:BE:C7:
                                9B:2A:C5:70:B8:02:21:00:E7:CC:CE:B1:FE:82:76:48:
                                D2:2F:B3:B1:87:48:F5:5C:F5:F1:CE:9C:01:19:E2:A7:
                                61:2B:D3:01:FA:06:14:1C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
                                ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
                    Timestamp : May 30 04:00:30.115 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D1:D4:76:29:16:3E:96:37:D9:2F:7E:
                                FD:5A:8E:21:5D:79:FC:E7:AD:3E:97:C7:9E:F5:A7:CF:
                                BC:D5:08:BE:B7:02:21:00:A3:78:9F:B2:23:9C:4A:F1:
                                E7:90:C8:B0:D7:D5:D6:9B:7A:8D:3F:B7:63:44:E3:6E:
                                83:2D:C7:A5:66:64:7B:7E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : May 30 04:00:30.118 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:56:47:60:EE:5A:E1:52:E6:AC:A0:6A:A1:
                                8F:D2:E3:AF:A0:3A:9E:49:4F:B7:02:95:E6:64:83:01:
                                C6:E4:8C:E6:02:21:00:C0:AF:44:81:FB:65:30:2C:09:
                                E7:04:E8:4A:95:78:D9:D8:26:E0:21:BF:19:51:02:4D:
                                CC:D6:15:DD:29:F4:4C
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        79:48:ef:f0:2b:bd:5b:81:2e:8c:dc:47:9b:0d:4a:fc:68:1d:
        85:ee:db:36:53:c7:6d:2d:a7:bd:fb:8f:f4:f3:66:ce:4f:a2:
        ec:12:bc:4c:a4:1f:a5:8b:81:8a:32:1a:9e:60:ab:bd:a6:01:
        d6:e1:a1:3e:08:f0:68:7f:a5:5b:ae:72:71:bb:68:85:15:75:
        60:e5:14:bb:bc:cb:09:84:69:2d:0a:8c:07:16:b2:11:24:fc:
        b9:e1:4a:35:7c:ba:10:0c:dc:34:9d:ce:8a:47:e5:ec:21:6a:
        ae:f6:08:bc:f3:1a:65:82:82:53:e5:a1:5a:73:69:c4:9f:8d:
        c3:b3:ea:fd:94:de:48:12:f1:27:ed:5b:e4:8c:39:30:6a:28:
        a8:ed:6c:f1:2b:65:f6:69:bc:17:68:ce:24:df:47:26:3b:f0:
        ee:df:2e:87:bc:98:4c:17:b8:2a:70:ec:0c:66:74:8b:51:f7:
        4f:f7:16:0d:5c:e5:0c:a0:42:92:5a:cf:8d:3d:6a:69:b6:f8:
        29:80:de:ab:5e:18:1e:cb:f5:00:f1:8a:28:43:7f:6a:64:4f:
        a1:55:d5:be:42:9c:50:68:72:2a:cb:8e:d5:64:8e:30:8c:87:
        85:98:89:67:96:2e:cf:7c:af:8a:2b:95:fc:d1:d2:7d:17:a5:
        c4:fb:a5:8d

13.84.42.35

Last Seen: 2024-04-19

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1649230294 | 2024-04-19T16:01:10.620481
80 / tcp

Microsoft IIS httpd10.0

653529306 | 2024-04-19T16:50:08.110384
443 / tcp

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

13.84.42.35

Last Seen: 2024-04-19

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1649230294 | 2024-04-19T16:01:10.620481 80 / tcp

Microsoft IIS httpd10.0

653529306 | 2024-04-19T16:50:08.110384 443 / tcp

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

-1649230294 | 2024-04-19T16:01:10.620481
80 / tcp

653529306 | 2024-04-19T16:50:08.110384
443 / tcp