AmazonS3
tcp/443
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb40df5313
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true sparseCheckout = true [remote "origin"] url = https://github.com/DriscollsInc/applications-assets.git fetch = +refs/heads/*:refs/remotes/origin/* [credential "https://github.com/DriscollsInc/applications-assets.git"] username = DriscollsAdmin [lfs] storage = C:\\BuildAgent\\system\\git\\git-FE632E19.git\\lfs [branch "develop"] remote = origin merge = refs/heads/develop
Severity: critical
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb5e49d141
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true sparseCheckout = true [remote "origin"] url = https://github.com/DriscollsInc/applications-assets.git fetch = +refs/heads/*:refs/remotes/origin/* [credential "https://github.com/DriscollsInc/applications-assets.git"] username = DriscollsAdmin [lfs] storage = C:\\BuildAgent\\system\\git\\git-FE632E19.git\\lfs [branch "release-2026-01"] remote = origin merge = refs/heads/release-2026-01
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb46d6b653
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true sparseCheckout = true [remote "origin"] url = https://github.com/DriscollsInc/applications-assets.git fetch = +refs/heads/*:refs/remotes/origin/* [credential "https://github.com/DriscollsInc/applications-assets.git"] username = DriscollsAdmin [lfs] storage = C:\\BuildAgent\\system\\git\\git-FE632E19.git\\lfs [branch "release-2025-09"] remote = origin merge = refs/heads/release-2025-09
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb259fc4b1
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true sparseCheckout = true [remote "origin"] url = https://github.com/DriscollsInc/applications-assets.git fetch = +refs/heads/*:refs/remotes/origin/* [credential "https://github.com/DriscollsInc/applications-assets.git"] username = DriscollsAdmin [lfs] storage = C:\\BuildAgent\\system\\git\\git-FE632E19.git\\lfs [branch "hotfix-pe-3219"] remote = origin merge = refs/heads/hotfix-pe-3219
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb4b4754d1
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true sparseCheckout = true [remote "origin"] url = https://github.com/DriscollsInc/applications-assets.git fetch = +refs/heads/*:refs/remotes/origin/* [credential "https://github.com/DriscollsInc/applications-assets.git"] username = DriscollsAdmin [lfs] storage = C:\\BuildAgent\\system\\git\\git-FE632E19.git\\lfs [branch "release-2025-08"] remote = origin merge = refs/heads/release-2025-08
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb682b77ff
[core] repositoryformatversion = 0 filemode = false bare = false logallrefupdates = true symlinks = false ignorecase = true sparseCheckout = true [remote "origin"] url = https://github.com/DriscollsInc/applications-assets.git fetch = +refs/heads/*:refs/remotes/origin/* [credential "https://github.com/DriscollsInc/applications-assets.git"] username = DriscollsAdmin [lfs] storage = C:\\BuildAgent\\system\\git\\git-FE632E19.git\\lfs [branch "release-2025-07"] remote = origin merge = refs/heads/release-2025-07
Open service 108.138.26.59:443 · dev.applications-assets.driscolls.com
2026-01-25 21:20
HTTP/1.1 403 Forbidden Content-Type: application/xml Transfer-Encoding: chunked Connection: close Server: AmazonS3 Date: Sun, 25 Jan 2026 21:20:36 GMT X-Cache: Error from cloudfront Via: 1.1 26f61e70ac4b967ea82841cbd2dc7cf0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: 65vZE9dUyUdtDxmTNf23WhrN8pEmIObsQoQpd6XQ2McSF6EoxqJnvg== <?xml version="1.0" encoding="UTF-8"?> <Error><Code>AccessDenied</Code><Message>Access Denied</Message></Error>
Open service 108.138.26.59:443 · dev.applications-assets.driscolls.com
2026-01-23 21:30
HTTP/1.1 403 Forbidden Content-Type: application/xml Transfer-Encoding: chunked Connection: close Server: AmazonS3 Date: Fri, 23 Jan 2026 21:30:05 GMT X-Cache: Error from cloudfront Via: 1.1 56317bf75183e752b06c880e8a1e502a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: ZhwdmmR5XuwjZSjzrKkEm8V1lngljwC2i59daKF3LIdzsWGLCSu6SA== <?xml version="1.0" encoding="UTF-8"?> <Error><Code>AccessDenied</Code><Message>Access Denied</Message></Error>
Open service 108.138.26.59:443 · dev.applications-assets.driscolls.com
2026-01-22 21:22
HTTP/1.1 403 Forbidden Content-Type: application/xml Transfer-Encoding: chunked Connection: close Server: AmazonS3 Date: Thu, 22 Jan 2026 21:22:18 GMT X-Cache: Error from cloudfront Via: 1.1 9b7b71910b45e646f6476bbd270127a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: sSFiSCjAQOo5uzDPkQxloq957wxcn77oS2or6erjNCNRi25AF5gaAA== <?xml version="1.0" encoding="UTF-8"?> <Error><Code>AccessDenied</Code><Message>Access Denied</Message></Error>
Open service 108.138.26.59:443 · dev.applications-assets.driscolls.com
2026-01-21 21:18
HTTP/1.1 403 Forbidden Content-Type: application/xml Transfer-Encoding: chunked Connection: close Server: AmazonS3 Date: Wed, 21 Jan 2026 21:18:33 GMT X-Cache: Error from cloudfront Via: 1.1 fa87f2173bfe5d35fd73cec71ab12a32.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: wl8OzH8MAHoxBPpxUYkooDI7pEZUYEltsW3_5u5la4rwCf7k8wI2fg== <?xml version="1.0" encoding="UTF-8"?> <Error><Code>AccessDenied</Code><Message>Access Denied</Message></Error>