Vulnerability Assessment and Penetration Testing scanner alerts a breach in Plesk

Symptoms

• Vulnerability Assessment and Penetration Testing scanner alerts a breach in Plesk

Cause

AWS S3 IAM credentials are hardcoded in the Plesk pages

CONFIG_TEXT: Jsw.UAT.init({ ... ,"accessKeyId":"*********","secretAccessKey":"*****************************"," ... })

Resolution

Authentication is required to send data via Plesk User Activity Tracking. This function includes these credentials publicly in order to work as intended. This is not considered a vulnerability because the exposed account credentials have no harmful permissions — only anonymized technical data is gathered and sent via these credentials.

Disable this feature in order to pass vulnerability scanner checks:

How to disable Plesk User Activity Tracking