PT-2024-35174
CVE-2024-52314
·
Published
2024-11-08
·
Updated
2025-10-14
Description by
CVSS 4.0
6.9
MediumMetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
data.all (affected versions not specified)
Description
A data.all admin team member with access to the customer-owned AWS Account where data.all is deployed may be able to extract user data from data.all application logs via CloudWatch log scanning for particular operations that interact with customer producer teams data.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾