Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/12/16 7:48 p.m.•18 views

CVE-2025-14503

An overly-permissive IAM trust policy in the Harmonix on AWS framework may allow IAM principals in the same AWS account to escalate privileges via role assumption. The sample code for the EKS environment provisioning role is configured to trust the account root principal, which may enable any IAM...

8.6CVSS5.8AI score0.00516EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/15 7:45 p.m.•11 views

CVE-2025-14503 Overly Permissive Trust Policy in Harmonix on AWS EKS

An overly-permissive IAM trust policy in the Harmonix on AWS framework may allow IAM principals in the same AWS account to escalate privileges via role assumption. The sample code for the EKS environment provisioning role is configured to trust the account root principal, which may enable any IAM...

8.6CVSS5.8AI score0.00516EPSS
SaveExploits0References3
OSV
OSV
•added 2025/12/15 7:45 p.m.•15 views

CVE-2025-14503 Overly Permissive Trust Policy in Harmonix on AWS EKS

An overly-permissive IAM trust policy in the Harmonix on AWS framework may allow IAM principals in the same AWS account to escalate privileges via role assumption. The sample code for the EKS environment provisioning role is configured to trust the account root principal, which may enable any IAM...

8.6CVSS6AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2025/12/15 7:45 p.m.•42 views

CVE-2025-14503 Overly Permissive Trust Policy in Harmonix on AWS EKS

An overly-permissive IAM trust policy in the Harmonix on AWS framework may allow IAM principals in the same AWS account to escalate privileges via role assumption. The sample code for the EKS environment provisioning role is configured to trust the account root principal, which may enable any IAM...

8.6CVSS0.00516EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/15 12:00 a.m.•7 views

CVE-2025-14503: Incorrect Privilege Assignment

An overly-permissive IAM trust policy in the Harmonix on AWS framework may allow IAM principals in the same AWS account to escalate privileges via role assumption. The sample code for the EKS environment provisioning role is configured to trust the account root principal, which may enable any IAM...

8.6CVSS5.8AI score0.00516EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/15 12:00 a.m.•24 views

PT-2025-51281

Name of the Vulnerable Software and Affected Versions Harmonix on AWS versions 0.3.0 through 0.4.1 Description An overly-permissive IAM trust policy within the Harmonix on AWS framework could allow IAM principals within the same AWS account to escalate privileges through role assumption. The EKS...

8.6CVSS5.8AI score0.00516EPSS
SaveExploits0References7
Rows per page
Query Builder