WS-2020-0188

In the affected versions, the AWS Encryption CLI operated in "discovery mode" even when "strict mode" was specified. Although decryption only succeeded if the user had permission to decrypt with at least one of the CMKs, decryption could be successful using a CMK that was not included in the...

CLI does not correctly implement strict mode

In the affected versions, the AWS Encryption CLI operated in "discovery mode" even when "strict mode" was specified. Although decryption only succeeded if the user had permission to decrypt with at least one of the CMKs, decryption could be successful using a CMK that was not included in the...

PT-2020-20974

Name of the Vulnerable Software and Affected Versions AWS Encryption CLI versions prior to 1.8.x AWS Encryption CLI versions prior to 2.1.x Description The issue allows decryption to succeed using a CMK that was not included in the user-defined set when the CLI is operating in "strict mode", even...