GeneralInformation

Hostnames	ec2-3-211-25-208.compute-1.amazonaws.com
Domains	amazonaws.com
Cloud Provider	Amazon
Cloud Region	us-east-1
Cloud Service	EC2
Country	United States
City	Ashburn
Organization	Amazon Data Services NoVa
ISP	Amazon.com, Inc.
ASN	AS14618

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-2183	Grafana is an open-source platform for monitoring and observability. The option to send a test alert is not available from the user panel UI for users having the Viewer role. It is still possible for a user with the Viewer role to send a test alert using the API as the API does not check access to this function. This might enable malicious users to abuse the functionality by sending multiple alert messages to e-mail and Slack, spamming users, prepare Phishing attack or block SMTP server. Users may upgrade to version 9.5.3, 9.4.12, 9.3.15, 9.2.19 and 8.5.26 to receive a fix.
CVE-2023-1410	Grafana is an open-source platform for monitoring and observability. Grafana had a stored XSS vulnerability in the Graphite FunctionDescription tooltip. The stored XSS vulnerability was possible due the value of the Function Description was not properly sanitized. An attacker needs to have control over the Graphite data source in order to manipulate a function description and a Grafana admin needs to configure the data source, later a Grafana user needs to select a tampered function and hover over the description. Users may upgrade to version 8.5.22, 9.2.15 and 9.3.11 to receive a fix.
CVE-2023-1387	Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter auth_token and use it as the authentication token. By enabling the "url_login" configuration option (disabled by default), a JWT might be sent to data sources. If an attacker has access to the data source, the leaked token could be used to authenticate to Grafana.

OpenPorts

80 443

-1527650494 | 2024-04-25T05:44:09.859463

80 / tcp

HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 05:44:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache
Expires: -1
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block

-1527650494 | 2024-04-27T19:43:15.681739

443 / tcp

HTTP/1.1 200 OK
Date: Sat, 27 Apr 2024 19:43:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache
Expires: -1
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Xss-Protection: 1; mode=block

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:03:30:a9:98:b6:ae:3a:74:66:39:92:b4:0a:c7:68
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M03
        Validity
            Not Before: Aug 18 00:00:00 2023 GMT
            Not After : Sep 15 23:59:59 2024 GMT
        Subject: CN=*.stg-bixbyllm.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:38:09:a1:ed:f2:6f:71:e8:55:c8:2a:c9:
                    93:78:60:6c:3c:eb:8d:bc:26:d6:ba:81:1c:59:e4:
                    82:cd:b9:39:1e:1f:6b:c1:05:b0:0a:02:4a:9d:39:
                    49:a8:b7:f6:10:7a:9e:1e:48:08:a9:5c:c4:2b:86:
                    80:52:d3:51:dc:0c:23:ea:32:ac:f7:58:fd:28:e9:
                    51:97:c3:c4:fb:5d:0d:82:5e:4a:ae:6e:6f:9a:b9:
                    fa:ab:c6:92:08:26:0f:8b:6f:e9:8e:61:d6:e5:86:
                    1a:8b:71:71:e1:8a:e9:49:fd:e8:7f:e5:0b:c1:6f:
                    de:71:7d:28:be:ae:71:c7:35:40:75:77:d3:2d:8a:
                    48:dd:a0:49:d7:2f:d2:0b:d1:cf:2f:68:6b:2c:92:
                    e9:a7:7b:48:53:94:8c:04:2f:15:5e:83:90:dc:af:
                    c5:93:a7:11:30:d2:37:87:15:9d:77:b4:ff:31:04:
                    4e:51:b8:1e:ac:e2:76:6c:7e:75:4f:ee:c5:aa:4e:
                    fc:d8:77:27:e1:c3:bc:e2:05:e5:a2:8b:8f:09:1a:
                    2d:9e:d2:10:66:84:3b:5e:83:cc:cf:10:90:54:a7:
                    dc:4e:65:df:7e:37:db:4d:fe:fd:25:b7:ff:d8:11:
                    89:ad:45:3c:cc:45:93:fa:80:95:b4:e9:ed:06:1a:
                    f6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02
            X509v3 Subject Key Identifier: 
                DA:38:F8:07:58:85:91:06:C2:6F:6B:67:8A:8F:08:D8:8B:D6:94:38
            X509v3 Subject Alternative Name: 
                DNS:*.stg-bixbyllm.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m03.amazontrust.com/r2m03.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m03.amazontrust.com
                CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Aug 18 09:54:08.895 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:87:A6:97:A8:A2:5A:A1:13:B5:4A:44:
                                F5:95:AF:D3:D3:12:21:61:E4:9F:05:9E:51:2A:4F:43:
                                FD:39:78:E7:04:02:21:00:DC:03:3C:66:13:0D:D6:37:
                                67:5B:92:D5:11:C1:30:12:DF:0B:10:6B:30:7F:C3:81:
                                BB:9C:5A:C4:A6:E0:57:F3
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Aug 18 09:54:08.936 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:85:D9:C2:F1:14:30:89:7D:65:E3:58:
                                07:05:EE:D1:E7:E8:B7:52:5D:2A:53:A4:D7:C4:04:55:
                                21:11:CC:E3:F7:02:20:00:E2:C1:1A:E4:A7:97:B3:33:
                                1D:E3:21:8E:E6:8C:4D:88:86:35:F3:65:E5:96:B5:FC:
                                20:E3:01:78:DA:32:7E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Aug 18 09:54:08.883 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:08:F6:35:96:D1:0D:37:8A:85:AF:6D:0F:
                                DB:48:EA:D6:5B:16:29:12:83:67:5E:9D:C1:5C:0B:52:
                                A5:A3:6C:1D:02:20:62:58:17:98:B1:A6:BF:CE:BC:F0:
                                97:C2:93:FD:EB:8E:F0:2D:0A:E4:33:03:0E:62:3A:F8:
                                CB:0E:CF:79:B6:E9
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        66:73:e0:ba:56:df:d7:ba:b3:a1:e8:dd:9b:5c:b4:a0:81:df:
        80:13:b5:ba:ba:e4:97:f0:a5:45:6d:19:0b:34:52:85:b7:7c:
        94:8c:34:55:86:2a:59:2a:1a:da:4d:c6:b2:9b:e9:ef:30:84:
        c7:12:77:56:1c:7b:bf:96:ce:fa:0e:4a:38:3c:1b:35:78:1b:
        1b:3c:77:a4:7f:2c:af:e3:b1:ac:75:7e:b1:5a:51:b3:21:dc:
        f4:d6:19:20:9a:ed:06:5f:4a:c7:fa:6d:68:65:9b:d2:73:00:
        1d:9e:f8:23:1d:5c:54:cb:de:55:48:09:47:47:a5:7c:a2:94:
        47:a7:fa:cb:fa:4f:e5:d9:87:79:b0:d0:36:46:1b:03:91:86:
        dd:6f:27:15:ac:00:67:4e:a8:9a:65:36:84:d1:33:56:70:b4:
        6a:b3:aa:93:8a:ea:40:73:ab:ba:6d:bf:9a:3a:dd:ba:67:7a:
        82:04:f2:14:82:ab:89:d0:10:0e:7b:b8:53:d8:75:4d:ab:89:
        d1:26:fe:6d:fa:8e:01:36:f2:51:b2:c8:4e:30:96:92:83:af:
        d5:19:ea:99:a1:c7:f6:a1:2b:78:29:5c:db:71:b8:d6:6c:8a:
        ba:e1:62:20:d0:ea:2f:f0:52:15:4f:7b:11:34:81:1a:ec:c7:
        cb:c7:ad:d2

3.211.25.208

Last Seen: 2024-04-27

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1527650494 | 2024-04-25T05:44:09.859463
80 / tcp

Grafana (Open Source)9.3.8

-1527650494 | 2024-04-27T19:43:15.681739
443 / tcp

Grafana (Open Source)9.3.8

Products

Pricing

Contact Us

3.211.25.208

Last Seen: 2024-04-27

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-1527650494 | 2024-04-25T05:44:09.859463 80 / tcp

Grafana (Open Source)9.3.8

-1527650494 | 2024-04-27T19:43:15.681739 443 / tcp

Grafana (Open Source)9.3.8

Products

Pricing

Contact Us

-1527650494 | 2024-04-25T05:44:09.859463
80 / tcp

-1527650494 | 2024-04-27T19:43:15.681739
443 / tcp