outpost

Outpost AWS 테스트 및 보고 관리 Outpost는 AssumeRole용 AWS 구성 파일을 생성하고, 계정이 정상적으로 작동하는지 확인하는 테스트 기능, 그리고 ScoutSuite 스캔 결과용 리포트 생성기를 제공하는 간단한 도구입니다. ScoutSuite 실행 결과 파싱 ✨보고서 결과 생성✨ 설치 Outpost는 Python3와 boto3가 필요합니다. 의존성을 설치하세요. virtualenv -p python3 . source bin/activate pip install -r requirements.txt pyth...

EUVD-2026-92131

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...

CVE-2026-105165

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...

CVE-2026-105165

The devopspolis secrets-replicator (versions up to 0.4.0 ) is vulnerable to an issue in the AssumeRole Handler component. Specifically, the process_single_secret function in src/handler.py allows for incorrect permission assignment due to the manipulation of the external_id argument. This vulnera...

CVE-2026-105165 devopspolis secrets-replicator AssumeRole handler.py process_single_secret permission assignment

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...

PT-2026-104651

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process single secret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument external id leads to incorrect permission assignment. The attack can be...

Assume the Worst:Enumerating AWS Roles through ‘AssumeRole’

The post Assume the Worst: Enumerating AWS Roles through ‘AssumeRole’ appeared first on Rhino Security Labs...

Design/Logic Flaw

HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account...

CVE-2015-6861

HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account...

CVE-2015-6861

CVE-2015-6861 affects HPE Helion Eucalyptus (versions 3.4.0–4.2.0). The issue allows remote authenticated users to bypass the intended AssumeRole permission and assume an IAM role by abusing a policy setting on a user’s account. Impact is described as bypassing IAM permission controls with potent...

CVE-2015-6861: Undefined Security Weakness

HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account...