GeneralInformation

Hostnames	admin-dev.acredite.se admin-dev2.acredite.se admin-stg.acredite.se backend-dev.acredite.se backend-dev2.acredite.se backend-stg.acredite.se convert-dev.acredite.se convert-dev2.acredite.se convert-stg.acredite.se frontend-legacy-dev.acredite.se frontend-legacy-dev2.acredite.se frontend-legacy-stg.acredite.se ec2-52-23-140-223.compute-1.amazonaws.com
Domains	acredite.se amazonaws.com
Cloud Provider	Amazon
Cloud Region	us-east-1
Cloud Service	EC2
Country	United States
City	Ashburn
Organization	Amazon Technologies Inc.
ISP	Amazon.com, Inc.
ASN	AS14618

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-3618	5.8ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
CVE-2021-23017	6.8A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

OpenPorts

80 443

1882785403 | 2024-04-19T13:59:12.111348

80 / tcp

HTTP/1.1 301 Moved Permanently
Server: nginx/1.19.10
Date: Fri, 19 Apr 2024 13:59:11 GMT
Content-Type: text/html
Content-Length: 170
Connection: keep-alive
Location: https://52.23.140.223/

-99563055 | 2024-04-20T08:51:48.250907

443 / tcp

HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Sat, 20 Apr 2024 08:51:47 GMT
Content-Type: text/html
Content-Length: 2143
Connection: keep-alive
Last-Modified: Wed, 14 Jun 2023 13:12:55 GMT
ETag: "6489bcd7-85f"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:50:f1:b3:70:d6:44:13:dd:45:79:a4:ff:80:09:45:71:51
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R3
        Validity
            Not Before: Mar  6 13:37:48 2024 GMT
            Not After : Jun  4 13:37:47 2024 GMT
        Subject: CN=admin-dev.acredite.se
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:97:19:df:f3:61:0d:b7:ed:5b:8b:19:42:1e:7b:
                    03:12:f5:75:93:26:dd:ac:85:aa:cc:4a:1b:17:c1:
                    5c:c3:a7:47:4f:96:ce:9a:56:99:46:1c:f0:48:16:
                    68:8c:85:84:d0:c0:e5:62:09:c3:65:b2:ec:e5:fd:
                    eb:ab:d1:7f:88:d6:1b:a0:d4:d2:ee:2e:af:c3:53:
                    da:dc:89:17:e0:88:e3:65:c2:8f:6f:88:8b:84:78:
                    5d:21:ce:54:1d:bf:5b:dc:f4:6e:3a:2b:27:3b:76:
                    9b:41:b3:b9:d6:cc:77:ad:ac:06:40:25:1f:7f:21:
                    07:f9:7c:b1:f1:3d:dc:9b:78:2b:51:35:d2:31:37:
                    9c:55:07:63:27:c1:d2:9e:0a:54:c9:16:22:4e:57:
                    b6:1a:d0:f3:6f:9f:cd:89:49:d6:5d:63:47:99:8a:
                    bd:4a:a0:d4:f5:18:fb:4b:2f:39:14:05:45:09:6e:
                    c1:9d:4c:a1:bf:3d:a6:3d:ab:f6:87:36:91:58:48:
                    5d:57:0d:7f:63:63:1a:e6:d5:f7:6b:17:e8:8a:f7:
                    ef:6b:99:8d:3d:74:50:e4:fc:65:3f:f0:6a:07:ed:
                    26:74:05:7d:fc:5e:67:1b:3f:14:29:0a:84:05:ea:
                    10:f1:66:14:63:fd:f2:1d:cb:28:e8:2c:58:6e:ff:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                BC:49:CE:A0:B0:15:BA:D0:7C:15:E3:06:1A:22:B3:7E:54:2E:28:A1
            X509v3 Authority Key Identifier: 
                14:2E:B3:17:B7:58:56:CB:AE:50:09:40:E6:1F:AF:9D:8B:14:C2:C6
            Authority Information Access: 
                OCSP - URI:http://r3.o.lencr.org
                CA Issuers - URI:http://r3.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:admin-dev.acredite.se, DNS:admin-dev2.acredite.se, DNS:admin-stg.acredite.se, DNS:backend-dev.acredite.se, DNS:backend-dev2.acredite.se, DNS:backend-stg.acredite.se, DNS:convert-dev.acredite.se, DNS:convert-dev2.acredite.se, DNS:convert-stg.acredite.se, DNS:frontend-legacy-dev.acredite.se, DNS:frontend-legacy-dev2.acredite.se, DNS:frontend-legacy-stg.acredite.se
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 3B:53:77:75:3E:2D:B9:80:4E:8B:30:5B:06:FE:40:3B:
                                67:D8:4F:C3:F4:C7:BD:00:0D:2D:72:6F:E1:FA:D4:17
                    Timestamp : Mar  6 14:37:48.373 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:5C:E3:F4:6C:DA:27:2B:A2:79:B3:FB:59:
                                66:88:9E:D6:90:A1:74:4B:A3:5A:76:A3:B8:96:20:73:
                                DB:5E:24:19:02:21:00:C8:A4:AB:B1:83:0C:C9:27:A9:
                                06:43:28:74:7A:D3:34:39:C7:EF:CB:FA:FB:54:FE:4E:
                                F5:E4:38:6F:32:11:31
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Mar  6 14:37:48.373 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:EA:9C:C2:A9:E1:24:AA:AE:FD:C9:B9:
                                C8:57:EF:19:50:CE:BB:EC:43:1B:20:B2:93:B8:0F:86:
                                9C:EF:27:59:56:02:20:02:80:F5:66:2C:B1:7C:88:DB:
                                82:32:A8:02:18:E6:06:8A:B2:0F:41:5B:ED:A7:E7:B7:
                                BA:52:D2:43:8B:B5:31
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        76:da:8a:33:a1:31:0e:f4:25:7a:4e:da:1e:94:87:f4:39:8f:
        d5:ce:8c:c3:52:82:88:24:38:03:88:41:8d:bd:bd:aa:d3:f5:
        42:9f:2c:19:db:ba:66:aa:7c:b4:67:01:6b:20:79:25:a9:f4:
        21:51:52:4f:e9:d8:aa:e1:90:6a:92:41:9a:b5:a4:90:4b:01:
        a7:fd:a7:72:ad:cc:2e:6a:c7:99:fe:c4:ee:8a:43:a4:b7:32:
        c6:86:5b:51:79:8c:e7:90:04:b5:e6:c1:cd:a0:a8:8d:67:6c:
        7e:d8:37:25:53:ed:a3:6a:7e:15:97:da:2f:eb:12:c5:e1:fa:
        a8:3a:a4:fc:4b:52:a1:03:3e:b1:86:ea:89:29:cb:22:b0:2b:
        e9:18:30:3c:04:02:01:57:ef:71:c3:2d:be:3d:fa:63:5c:8c:
        7f:42:04:1c:fe:40:cd:a3:6f:8d:7f:b6:3f:7e:df:d5:8a:d3:
        28:ba:0d:39:14:72:e2:8c:dd:f9:55:76:10:30:25:e6:11:89:
        25:98:3c:82:b7:1c:ed:ee:c9:7a:29:e3:e4:36:fc:04:a0:d8:
        7d:93:98:d3:ad:ce:2b:e8:8d:0f:45:a6:46:9c:58:a4:51:09:
        86:20:f3:ba:36:81:46:53:bc:98:eb:c1:1b:d4:4d:5e:15:c7:
        5c:0e:79:60

52.23.140.223

Last Seen: 2024-04-20

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1882785403 | 2024-04-19T13:59:12.111348
80 / tcp

nginx1.19.10

-99563055 | 2024-04-20T08:51:48.250907
443 / tcp

nginx1.19.10

Products

Pricing

Contact Us

52.23.140.223

Last Seen: 2024-04-20

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

1882785403 | 2024-04-19T13:59:12.111348 80 / tcp

nginx1.19.10

-99563055 | 2024-04-20T08:51:48.250907 443 / tcp

nginx1.19.10

Products

Pricing

Contact Us

1882785403 | 2024-04-19T13:59:12.111348
80 / tcp

-99563055 | 2024-04-20T08:51:48.250907
443 / tcp