Boletines de Vulnerabilidades

Issue with AWS Deployment Framework - CVE-2024-37293

   
Software afectado AmazonWS
 
Publication Date: 2024/06/11 09:00 AM PDT AWS is aware of the issues described in CVE-2024-37293, relating to the open-source AWS Deployment Framework (ADF). These issues affect the bootstrap process that is responsible to deploy ADFs bootstrap stacks to facilitate multi-account cross-region deployments. The ADF bootstrap process relies on elevated privileges to perform this task. Two versions of the bootstrap process exist; a code-change driven pipeline using AWS CodeBuild and an event-driven

More info:

https://aws.amazon.com/security/security-bulletins/AWS-2024-005/