Aaia

NOTA Este repositorio no está en desarrollo activo. Sin embargo, estoy abierto a aceptar PRs. Aaia aún funciona ya que no ha habido cambios significativos en las APIs de AWS que utiliza para recopilar datos. Aaia Análisis de Identidad y Acceso Nota: La expansión se creó después de decidir el nomb...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: minio-fips, crossplane-provider-aws-cloudsearch-fips, gatekeeper, gatekeeper-fips, crossplane-provider-aws-sesv2-fips, kube-arangodb-fips, loki, crossplane-provider-aws-appflow-fips, aactl, crossplane-provider-aws-cloudformation-fips, crossplane-provider-aws-emr,...

CVE-2024-37293

The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...

CVE-2024-37293 aws-deployment-framework's potential risk can lead to privilege escalation

The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...

CVE-2024-37293 aws-deployment-framework's potential risk can lead to privilege escalation

The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...

CVE-2024-37293

The CVE concerns the AWS Deployment Framework (ADF) bootstrap process. Prior to v4.0.0, the bootstrap CodeBuild role could call sts:AssumeRole without restrictions, enabling escalation to any AWS account in the organization with elevated privileges. Patches are included in aws-deployment-framewor...

CVE-2024-37293 aws-deployment-framework's potential risk can lead to privilege escalation

The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...

CVE-2024-37293: Incorrect Privilege Assignment

The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...