7 matches found
Aaia
注意 此仓库不再积极开发。但欢迎接受 PR。Aaia 仍然可以正常工作，因为它所依赖的 AWS API 在数据收集方面没有重大变化。 Aaia Analysis of Identity and Access 注意：名称确定后才补充的扩展解释 :P Aaia 能做什么？ Aaia（发音如此处所示）借助 Neo4j 以图形格式可视化 AWS IAM 和 Organizations，有助于轻松识别异常。由于基于 Neo4j，用户可以使用 Cypher 查询来查找异常。 Aaia 还支持通过模块以编程方式从 Neo4j 数据库获取数据并进行自定义处理。这在需要执行复杂比较或逻辑（仅通过 Cyph...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-family-aws, chainctl, longhorn-cli-fips, crossplane-provider-aws-backup, snyk-cli, commercial-expanso-edge, docker-compose, terragrunt-fips, hcloud, crossplane-provider-azure-securityinsights,...
CVE-2024-37293
The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...
CVE-2024-37293 aws-deployment-framework's potential risk can lead to privilege escalation
The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...
CVE-2024-37293 aws-deployment-framework's potential risk can lead to privilege escalation
The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...
CVE-2024-37293
The CVE concerns the AWS Deployment Framework (ADF) bootstrap process. Prior to v4.0.0, the bootstrap CodeBuild role could call sts:AssumeRole without restrictions, enabling escalation to any AWS account in the organization with elevated privileges. Patches are included in aws-deployment-framewor...
CVE-2024-37293 aws-deployment-framework's potential risk can lead to privilege escalation
The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...