Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BUG: ec2-security-group-whitelists-non-elastic-ips.json #1693

Open
nunofranciscomoreira opened this issue Jan 29, 2025 · 0 comments
Open

BUG: ec2-security-group-whitelists-non-elastic-ips.json #1693

nunofranciscomoreira opened this issue Jan 29, 2025 · 0 comments
Labels
bug Something isn't working potential Unconfirmed issue

Comments

@nunofranciscomoreira
Copy link

nunofranciscomoreira commented Jan 29, 2025

Describe the bug

the checks interprets IP CIDR as a boolean and check fails.

Please provide:

  • A clear and concise description of what the bug is.
    • ERROR conditions.py L46: Unable to process testcase 'inSubnets' on value '{'CIDR': '0.0.0.0/0'}', interpreted as False: unexpected type <class 'dict'> for addr arg
  • Console output using the --debug argument.
2025-01-29 12:18:55 90ccef034abd scout[25] ERROR conditions.py L46: Unable to process testcase 'inSubnets' on value '{'CIDR': '0.0.0.0/0'}', interpreted as False: unexpected type <class 'dict'> for addr arg
Traceback (most recent call last):
  File "/root/scoutsuite/lib/python3.12/site-packages/ScoutSuite/core/conditions.py", line 46, in pass_conditions
    res = pass_condition(target_obj, test_name, test_values)
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/root/scoutsuite/lib/python3.12/site-packages/ScoutSuite/core/conditions.py", line 219, in pass_condition
    grant = netaddr.IPNetwork(b)
            ^^^^^^^^^^^^^^^^^^^^
  File "/root/scoutsuite/lib/python3.12/site-packages/netaddr/ip/__init__.py", line 1034, in __init__
    value, prefixlen = parse_ip_network(
                       ^^^^^^^^^^^^^^^^^
  File "/root/scoutsuite/lib/python3.12/site-packages/netaddr/ip/__init__.py", line 925, in parse_ip_network
    raise TypeError('unexpected type %s for addr arg' % type(addr))
TypeError: unexpected type <class 'dict'> for addr arg
  • If possible, the errors JSON file generated at the end of execution (the CLI output will provide the path to this file). The file can be sent to [email protected] to avoid including sensitive content in the GitHub issue.
    • Attached next with redacted data.

To Reproduce

Please provide:

  • The exact CLI parameters used to run Scout Suite.
    • scout aws --force --no-browser --report-name error_test --report-dir test_dir --result-format json --ruleset test_ruleset.json --debug

Additional context

test_ruleset.json

scoutsuite_errors_error_test.json

Add any other context about the problem here.

@nunofranciscomoreira nunofranciscomoreira added bug Something isn't working potential Unconfirmed issue labels Jan 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working potential Unconfirmed issue
Projects
None yet
Development

No branches or pull requests

1 participant