If “owners” is left when we want my AMI, researchers noticed, AWS can bring back the results involving the Amis community from any account. The attackers can exploit this brutalism by the same name and the new Timestamp Timestamp, Trixing Autory Autory-As-Code (IAC) as a Terreform in selecting a good picture.
Victims are at risk only when using EC2.Descrizeroges API in a word filter, leaving the “owners’ quality”, and select the risk of disclosing the example.
Amazon fixed the problem
In the Disclosure of AWS risk AWS (VDP), researchers find that internal AWS programs were at risk, may be that attackers may allow the code to work on military infrastructure. The story was exposed and quickly prepared on September 2024.
Source link