5 ms·
https://twitter.com/0xdabbad00/status/1481693260087275532?s=21 https://twitter.com/0xdabbad00/status/1481693260087275532?s=... Actually seems like, out of the
by WhatDoIKn0w 5y ago
https://twitter.com/0xdabbad00/status/1481693260087275532?s=21 https://twitter.com/0xdabbad00/status/1481693260087275532?s=...
Actually seems like, out of the 2 vulnerabilities that were discovered: the one in AWS Glue is more severe, actually gaining cross-tenant data access to some services (Glue & S3, affecting all present and past Glue users).
Also, AWS released bulletins confirming this.
- AWS Glue - https://aws.amazon.com/security/security-bulletins/AWS-2022-002/ https://aws.amazon.com/security/security-bulletins/AWS-2022-...
- CloudFormation - https://aws.amazon.com/security/security-bulletins/AWS-2022-001/ https://aws.amazon.com/security/security-bulletins/AWS-2022-...