Boletines de Vulnerabilidades

CVE-2024-28056


Información sobre el sistema

   
Software afectado AmazonWS

Descripción

Publication Date: 2024/04/15 07:00 PM PST AWS is aware of CVE-2024-28056, which affects Amplify CLI versions prior to 12.10.1. We released a fix to Amplify on January 10, 2024, and recommend customers upgrade to 12.10.1 to address this issue. We have proactively communicated with the customers using affected versions. AWS has taken additional steps to protect customers using Amplify from unintentional misconfigurations. AWS added a mitigation to the AWS Security Token Service (STS) where

More info:

https://aws.amazon.com/security/security-bulletins/AWS-2024-003/

Identificadores estándar

Propiedad Valor
CVE CVE-2024-28056.

Histórico de versiones

Versión Comentario Fecha

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT