漏洞描述
Amazon MWS authentication token was detected.
id: amazon-mws-auth-token-value
info:
name: Amazon MWS Authentication Token - Detect
author: gaurang
severity: medium
description: Amazon MWS authentication token was detected.
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score: 5.3
cwe-id: CWE-200
tags: file,keys,token,amazon,auth,mws
file:
- extensions:
- all
extractors:
- type: regex
regex:
- "amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"
# digest: 4a0a0047304502202ab7e89b4201e6c6fcfefc2b6b7e31eb804f5df0d21b57006f919e13a37087b6022100f8075330a95d8a5ced6286d387b8c1e44dfc70a5f8dac9b1b65f5fad6171b4df:922c64590222798bb761d5b6d8e72950