Lucene search
GoogleOSV:GHSA-4FPG-J5MP-783GHistoryMay 13, 2022 - 1:49 a.m.
Cloudtoken Insufficiently Protects Credentials
2022-05-1301:49:46
Google
osv.dev
12
cloudtoken
credentials
unauthenticated access
linux
network
aws credentials
EPSS
0.001
Percentile
25.2%
Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users’ roles.
Related
nvd
nvd
CVE-2018-13390
2018-08-10 15:29:00
prion
prion
Improper access control
2018-08-10 15:29:00
github
github
Cloudtoken Insufficiently Protects Credentials
2022-05-13 01:49:46
veracode
veracode
Credential Exposure
2024-04-30 08:02:53
cve
cve
CVE-2018-13390
2018-08-10 15:29:00
osv
osv
PYSEC-2018-1
2018-08-10 15:29:00
cvelist
cvelist
CVE-2018-13390
2018-08-10 15:00:00