Boletines de Vulnerabilidades

Reported Amazon RDS PostgreSQL issue

   
Software afectado AmazonWS
 
Initial Publication Date: 2022/04/11 16:45 PST Last Updated Date: 2022/04/12 13:00 PST A security researcher recently reported an issue with Aurora PostgreSQL. Using this issue, they were able to gain access to internal credentials that were specific to their Aurora cluster. No cross-customer or cross-cluster access was possible; however, highly privileged local database users who could exercise this issue could potentially have gained additional access to data hosted in their cluster or read

More info:

https://aws.amazon.com/security/security-bulletins/AWS-2022-004/