Tech
Orca Security discovered two AWS vulnerabilities, with one vulnerability being managed by Glue users and the other affecting AWS CloudFormation; Amazon patched both (Nathaniel Mott/PCMag)
Nathaniel Mott / PCMag:
Orca Security discovered two AWS vulnerabilities, with one vulnerability being managed by Glue users and the other affecting AWS CloudFormation; Amazon patched both– The vulnerability could be used by an AWS Glue user to access other users’ data. A second bug with AWS CloudFormation, also fixed, could have been used to leak sensitive files.
Source link