WS-2021-0019

Key Caching behavior was found in DynamoDB Encryption Client before 1.15.0...

GHSA-4PH2-8337-HM62 Key Caching behavior in the DynamoDB Encryption Client.

Impact This advisory concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service that allows for permissions on keys to be modified. When key usage permissions were changed at the key provider, time-based key reauthorization logic in...

Key Caching behavior in the DynamoDB Encryption Client.

Impact This advisory concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service that allows for permissions on keys to be modified. When key usage permissions were changed at the key provider, time-based key reauthorization logic in...

com.nannoq:auth (>=1.0.0, <=1.1.7), com.nannoq:fcm (>=1.0.0, <=1.1.7) +6 more potentially affected by unknown CVE via com.amazonaws:aws-dynamodb-encryption-java (>=1.11.0, <=1.14.1)

com.amazonaws:aws-dynamodb-encryption-java MAVEN version =1.11.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.1.4, =1.0.28, =1.1.7 Source cves: unknown CVE Source advisory: GHSA-W736-HF9P-QQH3...

com.nannoq:auth (>=1.0.0, <=1.1.7), com.nannoq:fcm (>=1.0.0, <=1.1.7) +6 more potentially affected by unknown CVE via com.amazonaws:aws-dynamodb-encryption-java (>=1.11.0, <=1.14.1)

com.amazonaws:aws-dynamodb-encryption-java MAVEN version =1.11.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.1.4, =1.0.28, =1.1.7 Source cves: unknown CVE Source advisory: OSV:GHSA-W736-HF9P-QQH3...

Key Caching behavior in the DynamoDB Encryption Client.

Impact This advisory concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service that allows for permissions on keys to be modified. When key usage permissions were changed at the key provider, time-based key reauthorization logic in...

PT-2021-24379

Name of the Vulnerable Software and Affected Versions: DynamoDB Encryption Client versions prior to 1.3.0 Description: The issue concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service that allows for permissions on keys to be...

PT-2021-24464

Name of the Vulnerable Software and Affected Versions: DynamoDB Encryption Client versions prior to 1.15.0 Description: The issue concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service. When key usage permissions were changed at...