15 matches found
outpost
Outpost AWS Testing and Reporting Management Outpost is a simple tool to generate AWS configuration files for AssumeRole, a testing capability for verifying accounts work, and a report generator for ScoutSuite scan results. Run ScoutSuite Parse the results ✨Generate Report Findings✨ Installation...
EUVD-2026-92131
A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...
CVE-2026-105165
A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...
CVE-2026-105165 devopspolis secrets-replicator AssumeRole handler.py process_single_secret permission assignment
A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...
CVE-2026-105165 devopspolis secrets-replicator AssumeRole handler.py process_single_secret permission assignment
A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...
CVE-2026-105165
The devopspolis secrets-replicator (versions up to 0.4.0 ) is vulnerable to an issue in the AssumeRole Handler component. Specifically, the process_single_secret function in src/handler.py allows for incorrect permission assignment due to the manipulation of the external_id argument. This vulnera...
CVE-2026-105165 devopspolis secrets-replicator AssumeRole handler.py process_single_secret permission assignment
A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...
PT-2026-104651
A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process single secret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument external id leads to incorrect permission assignment. The attack can be...
CVE-2026-105165: Incorrect Permission Assignment for Critical Resource
A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...
Assume the Worst:Enumerating AWS Roles through ‘AssumeRole’
The post Assume the Worst: Enumerating AWS Roles through ‘AssumeRole’ appeared first on Rhino Security Labs...
Design/Logic Flaw
HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account...
CVE-2015-6861
HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account...
CVE-2015-6861
CVE-2015-6861 affects HPE Helion Eucalyptus (versions 3.4.0–4.2.0). The issue allows remote authenticated users to bypass the intended AssumeRole permission and assume an IAM role by abusing a policy setting on a user’s account. Impact is described as bypassing IAM permission controls with potent...
CVE-2015-6861: Undefined Security Weakness
HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assume an IAM role by leveraging a policy setting for a user's account...
PT-2016-3727
Name of the Vulnerable Software and Affected Versions HPE Helion Eucalyptus versions 3.4.0 through 4.2.0 Description The issue allows remote authenticated users to bypass an intended permission requirement, specifically the AssumeRole permission, and assume an IAM role. This is achieved by...