Boletines de Vulnerabilidades

Reported Amazon RDS PostgreSQL issue

   
Software afectado AmazonWS
 
Initial Publication Date: 2022/04/11 16:45 PST A security researcher recently reported an issue with Aurora PostgreSQL. Using this issue, they were able to gain access to internal credentials that were specific to their Aurora cluster. No cross-customer or cross-cluster access was possible; however, highly privileged local database users who could exercise this issue could potentially have gained additional access to data hosted in their cluster or read files within the operating system of the

More info:

https://aws.amazon.com/security/security-bulletins/AWS-2022-004/