PT-2018-11792
CVE-2018-13390
·
تاريخ النشر
2018-08-10
·
تاريخ التحديث
2022-05-13
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
cloudtoken daemon versions 0.1.1 through 0.1.23
Description
The issue allows unauthenticated access to the cloudtoken daemon on Linux systems via the network, enabling attackers on the same subnet to obtain temporary AWS credentials for the users' roles.
Recommendations
For cloudtoken daemon versions 0.1.1 through 0.1.23, update to version 0.1.24 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾