CVE-2025-45472

Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer cloud account...

CVE-2025-45472

Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer cloud account...

PT-2025-22511 · Unknown · Autodeploy-Layer

Name of the Vulnerable Software and Affected Versions: autodeploy-layer version 1.2.0 Description: The issue is related to insecure permissions, allowing attackers to escalate privileges and compromise the customer cloud account. Recommendations: For autodeploy-layer version 1.2.0, consider...

SAR-AutoDeploy-Layer 安全漏洞

SAR-AutoDeploy-Layer is a Lumigo open source SAR application used to automate the deployment of a Lambda layer to a region for all functions. A security vulnerability exists in SAR-AutoDeploy-Layer v1.2.0 that stems from improper permissions and could lead to elevated privileges and customer clou...

CVE-2025-45472: Incorrect Permission Assignment for Critical Resource

Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer cloud account...

CVE-2025-45472

The SAR-AutoDeploy-Layer (an open-source SAR application by Lumigo used to automate Lambda layer deployments) is affected by CVE-2025-45472. In version v1.2.0 , insecure permissions allow attackers to escalate privileges and potentially compromise the customer cloud account. To mitigate this risk...