Scan Summary
Assets scanned
633
Issues found
537
Malicious containers
6
Last scan

(2 hours ago)
Current status
Last scan: Ok
CIS AWS v1.5.0
 Compliance status: 156 issues
PCI DSS v4.0
 Compliance status: 222 issues
HIPAA
 Compliance status: 214 issues
Container Images
Among 22 analyzed container images, the following were found to be vulnerable:
CVE-2021-43527
nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)
CVE-2021-3711
openssl: SM2 Decryption Buffer Overflow
CVE-2021-20231
gnutls: Use after free in client key_share extension
CVE-2021-20232
gnutls: Use after free in client_send_params in lib/ext/pre_shared_key.c
CVE-2021-3520
lz4: memory corruption due to an integer overflow bug caused by memmove argument
CVE-2021-20305
nettle: Out of bounds memory access in signature verification
CVE-2021-3580
nettle: Remote crash in RSA decryption via manipulated ciphertext
CVE-2021-23840
openssl: integer overflow in CipherUpdate
CVE-2021-3517
libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c
CVE-2020-1712
systemd: use-after-free when asynchronous polkit queries are performed
CVE-2019-9169
glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read
CVE-2020-27618
glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop
CVE-2021-3326
glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters
CVE-2021-35942
glibc: Arbitrary read in wordexp()
CVE-2021-20271
rpm: Signature checks bypass via corrupted rpm package
Latest malicious container images:
Repository Image tag Malware
kitex33237/ubuntu2 latest Unix.Trojan.Generic-9919438-0
pranavbhatia/openvas2 latest Unix.Tool.Pnscan-8031486-0
strixtest/strix latest Multios.Coinminer.Miner-6781728-2
frozenfox/tomcat wolv Win.Adware.LoadMoney-3644756-1
tecexokel/prefab-parser latest Multios.Coinminer.Miner-6781728-2
Top malware detections:
Malware Malicious files
Js.Coinminer.Agent-7049519-0 2
Unix.Trojan.Generic-9919438-0 2
Multios.Coinminer.Miner-6781728-2 2
Top ports found to be exposed by containers:
Top networking services that match the ports exposed by containers:
Security Issues
Critical
71
High
88
Medium
136
Low
209
Informational
33
CloudWatch
Log groups (21) Medium: 21
Key Management Service
AWS managed keys (43) No issues
Customer managed keys (3) Critical: 3
GuardDuty
Detectors (2) Medium: 2
Simple Email Service
Domain identities (2) High: 1
Rule sets (1) Medium: 1
Route 53
Hosted zones (3) High: 2
Registered domains (1) Critical: 1
Organizations
Organizations (1) No issues
Invitations (2) No issues
Elastic File System
File systems (1) Critical: 1
Elastic Beanstalk
Environments (1) Critical: 1
Comprehend
Analysis jobs (2) High: 2
Certificate Manager
Certificates (3) Critical: 1
Systems Manager
Parameters (2) Critical: 2
SQS
Queues (3) Critical: 1
API Gateway
APIs (3) High: 8
Transfer Family
Servers (1) No issues
CloudFront
Distributions (1) Critical: 1
CloudFormation
Stacks (23) No issues
SageMaker
Notebook instances (2) High: 3
CloudTrail
Trails (32) Critical: 34
EMR
Clusters (2) Medium: 1
Lambda
Functions (5) Medium: 9
Athena
Workgroups (13) High: 1
Kinesis
Kinesis data streams (1) Low: 1
Firehose delivery streams (3) Critical: 1
SNS
Topics (17) High: 16
VPC
VPCs (25) High: 1
Subnets (89) No issues
Internet gateways (26) Low: 1
VPN gateways (1) Medium: 1
DynamoDB
Tables (3) Low: 2
EC2
Instances (7) Critical: 7
Volumes (7) Medium: 14
Security groups (60) Critical: 6
Elastic IPs (9) Medium: 4
Network interfaces (43) No issues
Launch configurations (1) No issues
Auto scaling groups (2) Medium: 1
S3
Buckets (6) High: 5
RDS
Snapshots (3) Critical: 2
Parameter groups (6) No issues
IAM
Users (8) Critical: 2
Groups (5) Informational: 1
Roles (94) High: 12
ECR
Private repositories (12) Critical: 7
EKS
Clusters (9) Low: 18
Scan Summary
Account name Assets scanned Issues found Malicious containers Last scan Current Status
Total 705 702 3
Container Images
Among 36 analyzed container images across 2 accounts, the following were found to be vulnerable:
Account name Critical High Medium Legend
Total 17 2 —
Latest malicious container images:
Account name Infected Image(s)
Top malware detections:
Malware Malicious files
Js.Coinminer.Agent-7049519-0 2
Unix.Trojan.Generic-9919438-0 1
Multios.Coinminer.Miner-6781728-2 1
Top ports found to be exposed by containers:
Top networking services that match the ports exposed by containers:
Security Issues
Critical
161
High
75
Medium
276
Low
189
Informational
0
Suppressed
1
Account name Critical High Medium Low Informational Suppressed Legend
Total 161 75 276 189 — 1