GeneralInformation

Hostnames	ec2-35-172-14-87.compute-1.amazonaws.com flow.micommunity.middlebury.edu flow.miis.ucroo.org
Domains	amazonaws.com middlebury.edu ucroo.org
Cloud Provider	Amazon
Cloud Region	us-east-1
Cloud Service	EC2
Country	United States
City	Ashburn
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS14618

WebTechnologies

JavaScript libraries

jQuery3.3.1

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-23064	6.1Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.
CVE-2020-11023	6.1In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	6.1In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

OpenPorts

80 443

1949896279 | 2024-03-31T13:33:50.943028

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Sun, 31 Mar 2024 13:33:50 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://35.172.14.87:443/

205074140 | 2024-04-15T17:12:09.444458

443 / tcp

HTTP/1.1 401 Unauthorized
Date: Mon, 15 Apr 2024 17:12:09 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 2246
Connection: keep-alive
Set-Cookie: AWSALB=FJMPxRRagtNCLBZmpMyZlcbISOff5Cy5wwHPxPC8w0JXX9M6ZP+zJetHxY3YzlF/PzkajuUCy+/TTXZ2div6XcQe4aBZQL3R+/F2og2LKpZ8kFpT3HhEREJ/PxlK; Expires=Mon, 22 Apr 2024 17:12:09 GMT; Path=/
Set-Cookie: AWSALBCORS=FJMPxRRagtNCLBZmpMyZlcbISOff5Cy5wwHPxPC8w0JXX9M6ZP+zJetHxY3YzlF/PzkajuUCy+/TTXZ2div6XcQe4aBZQL3R+/F2og2LKpZ8kFpT3HhEREJ/PxlK; Expires=Mon, 22 Apr 2024 17:12:09 GMT; Path=/; SameSite=None; Secure
Set-Cookie: JSESSIONID_ihub-frontend-78475c788d-nl7sx=node0g4j5sbduqb2h1vppnr2fuzq8i1498.node0; Path=/; Secure; HttpOnly; SameSite=None
Expires: Mon, 15 Apr 2024 17:12:09 GMT
Cache-Control: no-cache, private, no-store
Pragma: no-cache
X-Lift-Version: Unknown Lift Version

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:77:f2:21:58:d1:13:17:1a:57:25:e8:0f:38:a3:2f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M02
        Validity
            Not Before: May 17 00:00:00 2023 GMT
            Not After : Jun 15 23:59:59 2024 GMT
        Subject: CN=flow.micommunity.middlebury.edu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:47:ad:73:29:df:da:f4:e9:01:f8:09:5e:
                    21:d8:91:91:29:26:f3:94:f5:c0:85:a8:2a:58:1e:
                    6e:55:c6:01:95:89:bf:f6:35:cb:4d:c8:43:c9:a9:
                    43:8d:62:54:00:6d:4e:52:1a:fb:59:6f:08:4c:e7:
                    8f:fb:a5:96:b3:d2:b1:a1:98:32:ec:ed:d9:e3:9e:
                    1b:ca:af:22:fe:7e:46:83:40:de:21:d9:43:18:30:
                    db:b0:b5:fc:5d:78:ce:84:55:28:94:01:02:66:da:
                    6a:6c:9c:01:59:96:94:2f:e9:9e:dc:c6:0e:5e:40:
                    7c:58:d7:36:fd:60:ba:c2:92:25:45:34:8f:6e:51:
                    0c:f3:3c:16:2c:c1:1c:60:d9:b0:87:b6:4a:43:ab:
                    4f:98:b7:0d:c7:2b:5e:cc:e5:27:95:1a:dc:7b:a1:
                    98:89:e9:e8:de:c9:1d:8b:34:f1:e7:3b:05:6a:55:
                    5e:08:f0:3b:08:f4:41:66:bb:88:d5:53:d5:02:3e:
                    1a:44:7f:8d:36:c8:0b:18:aa:ea:bb:70:23:3a:de:
                    de:fb:0c:91:36:85:3b:db:4e:8b:00:8a:52:60:72:
                    cc:5d:c5:82:7a:3f:a2:e1:94:23:2e:da:12:00:4c:
                    65:84:84:9d:bd:00:ea:ab:ef:3d:6b:f8:df:41:de:
                    b2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                C0:31:52:CD:5A:50:C3:82:7C:74:71:CE:CB:E9:9C:F9:7A:EB:82:E2
            X509v3 Subject Key Identifier: 
                2A:19:F2:34:33:B5:B0:0A:7A:CF:68:F6:D7:E1:83:55:3A:70:19:4E
            X509v3 Subject Alternative Name: 
                DNS:flow.micommunity.middlebury.edu, DNS:flow.miis.ucroo.org
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m02.amazontrust.com/r2m02.crl
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m02.amazontrust.com
                CA Issuers - URI:http://crt.r2m02.amazontrust.com/r2m02.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : May 17 03:19:00.294 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:29:8F:18:7D:91:54:0D:B6:8B:4F:54:6F:
                                E8:F2:36:49:10:18:2B:CE:E6:35:21:DB:1A:7D:5C:0D:
                                45:34:E0:A7:02:20:76:88:BB:1F:40:8A:FD:D9:7C:B5:
                                37:DF:AC:4B:06:22:F9:71:AF:67:D4:B3:AF:91:E5:29:
                                53:CC:E3:65:35:AC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : May 17 03:19:00.346 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:B9:67:72:BB:14:99:3B:83:D8:47:A8:
                                6F:42:22:58:35:20:B3:B1:AD:80:99:08:B8:9E:C5:BC:
                                C2:97:04:8C:4A:02:20:51:22:AF:A6:EA:3B:0B:22:02:
                                27:91:62:80:A7:57:F7:D4:AE:53:C0:7E:DE:59:D3:5D:
                                70:2A:AB:ED:61:3D:B0
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : May 17 03:19:00.301 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:33:AC:C4:02:D8:B0:B7:D7:D7:6E:B9:2A:
                                4C:5B:BA:9C:6A:0D:74:C4:45:46:49:2B:68:E7:14:00:
                                F2:82:EA:CD:02:21:00:BD:45:77:95:E6:81:BF:79:0E:
                                FE:E7:2B:54:CD:3E:2C:B7:1B:1D:3E:42:F5:BB:AD:3D:
                                94:D0:79:02:57:3B:5F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        41:07:e9:0b:70:6d:41:2f:cd:0d:80:75:10:75:4a:2b:52:69:
        cb:62:77:43:87:a2:f4:65:70:11:b5:66:21:d9:9c:20:3f:29:
        c8:20:8a:ba:72:22:d4:fa:b2:6f:b8:a4:84:b1:41:90:f4:d6:
        30:f2:86:bb:4c:60:f8:1c:16:99:6c:4d:8a:f0:a4:28:55:ef:
        78:14:76:3e:46:05:db:aa:9e:42:fc:6d:c6:70:fd:c4:2f:d1:
        25:f2:65:09:86:d9:f6:a3:ad:93:e1:12:2d:60:76:45:54:2a:
        9c:55:c1:dc:4f:7d:17:c2:31:f4:d8:28:a5:df:a3:8e:5b:45:
        d3:04:05:dd:f6:94:59:00:e3:01:df:34:6c:64:a0:09:8d:cb:
        44:95:15:ea:58:a1:9b:c4:bd:0a:88:b9:14:4a:31:64:86:34:
        b7:fd:d8:fb:ff:45:03:15:8c:97:86:c8:94:2b:51:30:11:66:
        d4:f5:c6:ba:ac:d4:34:e2:8c:dc:76:4f:17:97:3f:22:a4:03:
        5d:e9:72:92:35:13:14:29:46:ca:5f:3a:5b:4e:af:a1:ad:f1:
        a3:40:41:bb:62:80:d9:1a:3f:15:30:21:9d:dd:e7:a5:e6:6f:
        6e:2c:8e:28:ea:5e:b2:40:a4:50:83:68:6e:f5:23:2c:9e:53:
        c4:3d:2a:bc

35.172.14.87

Last Seen: 2024-04-15

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1949896279 | 2024-03-31T13:33:50.943028
80 / tcp

AWS ELB2.0

205074140 | 2024-04-15T17:12:09.444458
443 / tcp

Products

Pricing

Contact Us

35.172.14.87

Last Seen: 2024-04-15

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1949896279 | 2024-03-31T13:33:50.943028 80 / tcp

AWS ELB2.0

205074140 | 2024-04-15T17:12:09.444458 443 / tcp

Products

Pricing

Contact Us

1949896279 | 2024-03-31T13:33:50.943028
80 / tcp

205074140 | 2024-04-15T17:12:09.444458
443 / tcp