AkamaiGHost
tcp/80
The following WSO2 product is publicly accessible and looks out-dated :
It is critical to update to a safe version as soon as possible since a vulnerability allow remote attackers to achieve RCE (Remote code execution) on the service. Those vulnerabilities are currently used in ransomware campaign and could damage your network.
Reference:
Severity: medium
Fingerprint: 0ac2efb9e7a4e4a8359084482a5fc7e32a5fc7e32a5fc7e32a5fc7e32a5fc7e3
Found WSO2 product Affected by CVE-2025-5605 (Authentication Bypass)
Severity: critical
Fingerprint: 0ac2efb9e7a4e4a89a803d6200fae19000fae19000fae19000fae19000fae190
Found WSO2 product: Vulnerable to CVE-2022-29464
Open service 159.50.194.248:443 · iam.dev.arval.com
2026-01-23 21:18
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_3_sn_69C6EB29A81AD0A837C9FD6E43B24304_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="1068562700", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=59C9273FE587F0FB48010E1C9F1C99B4; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Fri, 23 Jan 2026 21:18:50 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=324607660.58148.0000; path=/; Httponly; Secure
Open service 159.50.194.248:443 · iam.dev.arval.com
2026-01-22 21:36
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_11_sn_58B17F6CD04E2F71F9E38ADEF4596E04_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="1365198450", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=4355CBEFDA82EA76CF1BB53CDB8E35C0; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Thu, 22 Jan 2026 21:36:34 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=341384876.58148.0000; path=/; Httponly; Secure
Open service 2.16.204.75:80 · iam.dev.arval.com
2026-01-22 07:54
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://iam.dev.arval.com/ Date: Thu, 22 Jan 2026 07:54:34 GMT Connection: close
Open service 2a02:26f0:3100::1725:e263:443 · iam.dev.arval.com
2026-01-22 07:54
HTTP/1.1 302 Moved Temporarily X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="-1217818059", dtSInfo;desc="0" X-Content-Type-Options: nosniff Location: https://iam.dev.arval.com/carbon Content-Length: 0 Server: WSO2 Carbon Server Date: Thu, 22 Jan 2026 07:54:13 GMT Connection: close Set-Cookie: dtCookie=v_4_srv_9_sn_4C3BB920E46A4B7AEABC7E005E33CF18_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com Set-Cookie: JSESSIONID=93FA29591C5C57E4BD97BB82CE64939C; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=15768000
Open service 2a02:26f0:3100::1725:e253:80 · iam.dev.arval.com
2026-01-22 07:54
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://iam.dev.arval.com/ Date: Thu, 22 Jan 2026 07:54:35 GMT Connection: close
Open service 2.16.204.78:80 · iam.dev.arval.com
2026-01-22 07:54
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://iam.dev.arval.com/ Date: Thu, 22 Jan 2026 07:54:34 GMT Connection: close
Open service 2.16.204.78:443 · iam.dev.arval.com
2026-01-22 07:54
HTTP/1.1 302 Moved Temporarily X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="-1166791091", dtSInfo;desc="0" X-Content-Type-Options: nosniff Location: https://iam.dev.arval.com/carbon Content-Length: 0 Server: WSO2 Carbon Server Date: Thu, 22 Jan 2026 07:54:12 GMT Connection: close Set-Cookie: dtCookie=v_4_srv_12_sn_5E667AE9745A557A6F16360D3CA263A2_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com Set-Cookie: JSESSIONID=64561FA7FF84F0DE9873C656E9ADBB52; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=15768000
Open service 2a02:26f0:3100::1725:e263:80 · iam.dev.arval.com
2026-01-22 07:54
HTTP/1.1 301 Moved Permanently Server: AkamaiGHost Content-Length: 0 Location: https://iam.dev.arval.com/ Date: Thu, 22 Jan 2026 07:54:34 GMT Connection: close
Open service 2a02:26f0:3100::1725:e253:443 · iam.dev.arval.com
2026-01-22 07:54
HTTP/1.1 302 Moved Temporarily X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="831985024", dtSInfo;desc="0" X-Content-Type-Options: nosniff Location: https://iam.dev.arval.com/carbon Content-Length: 0 Server: WSO2 Carbon Server Date: Thu, 22 Jan 2026 07:54:12 GMT Connection: close Set-Cookie: dtCookie=v_4_srv_15_sn_AF57FCB62B4EC4802240E2CEC99C453F_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com Set-Cookie: JSESSIONID=7502B9D89C25D43544DE37639820CD82; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=15768000
Open service 2.16.204.75:443 · iam.dev.arval.com
2026-01-22 07:54
HTTP/1.1 302 Moved Temporarily X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="-804280942", dtSInfo;desc="0" X-Content-Type-Options: nosniff Location: https://iam.dev.arval.com/carbon Content-Length: 0 Server: WSO2 Carbon Server Date: Thu, 22 Jan 2026 07:54:12 GMT Connection: close Set-Cookie: dtCookie=v_4_srv_3_sn_356408C20F666B84F76662478532E3DD_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com Set-Cookie: JSESSIONID=258B95FDE97AD0D50ED41C8CAF5FFD45; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=15768000
Open service 159.50.194.248:443 · iam.dev.arval.com
2026-01-21 21:33
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_3_sn_DD97D2F96A014AF84983F391020DD390_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="583779895", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=B30693E06001358FF5B92C4FD3FD325A; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Wed, 21 Jan 2026 21:34:17 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=324607660.58148.0000; path=/; Httponly; Secure
Open service 159.50.194.248:443 · iam.dev.arval.com
2026-01-12 21:32
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_17_sn_B4B43F3E2DDCED142075EEE36D79B010_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="1940091135", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=F023B7DCEB94A4276428EBD711F657E7; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Mon, 12 Jan 2026 21:33:48 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=341384876.58148.0000; path=/; Httponly; Secure
Open service 159.50.194.248:443 · iam.dev.arval.com
2026-01-11 21:15
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_17_sn_A59F69A45B1BEF286534BBFC1B0CF8B5_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="-333959989", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=687E3EBA26A5542A4045F7001B065E83; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Sun, 11 Jan 2026 21:16:55 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=324607660.58148.0000; path=/; Httponly; Secure
Open service 159.50.194.248:443 · iam.dev.arval.com
2026-01-10 21:29
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_4_sn_19C6A2B6693965D19681824750394E73_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="-64593597", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=E2004D443CD67A020B54A5F24DC759E5; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Sat, 10 Jan 2026 21:30:53 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=324607660.58148.0000; path=/; Httponly; Secure
Open service 159.50.194.248:443 · iam.dev.arval.com
2026-01-09 21:28
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_14_sn_FACCE07CDBB46F38CE5176D070A9BD00_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="1768334834", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=028CD4D050D14C8FFA435A17A533E1BA; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Fri, 09 Jan 2026 21:29:36 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=324607660.58148.0000; path=/; Httponly; Secure
Open service 159.50.194.248:443 · iam.dev.arval.com
2026-01-08 21:47
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_12_sn_42CCE7140F76F003AC3FDE7B5884B87F_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="-1293789056", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=51A720CED062E281D8A6E89D10089ED9; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Thu, 08 Jan 2026 21:48:41 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=324607660.58148.0000; path=/; Httponly; Secure
Open service 159.50.194.248:443 · iam.dev.arval.com
2026-01-07 21:34
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_14_sn_52DCC305009EAFCD3A47C05E5B852A14_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="487644810", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=D7324A4E593D2D26D76D41B9AF95E3E2; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Wed, 07 Jan 2026 21:35:27 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=324607660.58148.0000; path=/; Httponly; Secure
Open service 159.50.194.248:443 · iam.dev.arval.com
2026-01-06 21:26
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_12_sn_46C564545D96E572AE6F96367D6E7472_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="846425528", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=D42F1B463E6F063146124CA462F4E014; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Tue, 06 Jan 2026 21:27:59 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=324607660.58148.0000; path=/; Httponly; Secure
Open service 159.50.194.248:443 · iam.dev.arval.com
2026-01-03 21:26
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_10_sn_6CA3A852B845445B2EF6216EB2F50ED8_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="-1573687279", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=EE795C9575BFFB2F9AA03E7441947F2C; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Sat, 03 Jan 2026 21:26:15 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=324607660.58148.0000; path=/; Httponly; Secure
Open service 159.50.194.248:443 · iam.dev.arval.com
2026-01-02 21:28
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_1_sn_9BDB25CE452551DC283B020EE37308DC_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="1846280206", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=77D3B5BA5E3AFFE936C28B658416FE0A; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Fri, 02 Jan 2026 21:28:51 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=324607660.58148.0000; path=/; Httponly; Secure
Open service 159.50.194.248:443 · iam.dev.arval.com
2026-01-01 21:16
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_13_sn_48EEE6F20B92C28890D114158808674B_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="621029809", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=AFD9D4056249A2FC8ACC38C379E0CE42; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Thu, 01 Jan 2026 21:16:48 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=324607660.58148.0000; path=/; Httponly; Secure
Open service 159.50.194.248:443 · iam.dev.arval.com
2025-12-31 21:35
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_14_sn_9868D05A1C56E7EB9B920E6967AE6A86_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="1882880872", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=D760788AAE8859126CB1E5D00A9B5AE1; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Wed, 31 Dec 2025 21:35:37 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=324607660.58148.0000; path=/; Httponly; Secure
Open service 159.50.194.248:443 · iam.dev.arval.com
2025-12-23 02:11
HTTP/1.1 302 Set-Cookie: dtCookie=v_4_srv_3_sn_CD0022E28BE8EAE6E750F447E5DA42D1_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.arval.com X-OneAgent-JS-Injection: true Server-Timing: dtRpid;desc="-1577507028", dtSInfo;desc="0" X-Content-Type-Options: nosniff Set-Cookie: JSESSIONID=C3E52ECE7E7319A262E7C2BCC35E4FA6; Path=/; Secure; HttpOnly Location: https://iam.dev.arval.com/carbon Content-Length: 0 Date: Tue, 23 Dec 2025 02:11:44 GMT Connection: close Server: WSO2 Carbon Server Set-Cookie: BIGipServerpool_iam.dev.arval.com_9443=324607660.58148.0000; path=/; Httponly; Secure