EUVD-2018-0028

Malware in sbrugna...

Cloudtoken Insufficiently Protects Credentials

Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles...

GHSA-4FPG-J5MP-783G Cloudtoken Insufficiently Protects Credentials

Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles...

Cloudtoken Information Disclosure Vulnerability

Cloudtoken is a command line utility used in Unix environments to provide authentication capabilities. An information disclosure vulnerability exists in Cloudtoken versions 0.1.1 excluding version 0.1.1 through 0.1.24 excluding version 0.1.24, which can be exploited by an attacker to obtain...

PYSEC-2018-1

Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles...

PYSEC-2018-1

Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles...

CVE-2018-13390

Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles...

Improper access control

Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles...

CVE-2018-13390

Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles...

CVE-2018-13390

{

CVE-2018-13390

Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles...

PT-2018-11792

Name of the Vulnerable Software and Affected Versions cloudtoken daemon versions 0.1.1 through 0.1.23 Description The issue allows unauthenticated access to the cloudtoken daemon on Linux systems via the network, enabling attackers on the same subnet to obtain temporary AWS credentials for the...

CVE-2018-13390: Undefined Security Weakness

Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles...