Miembros de
Boletines de Vulnerabilidades |
Issue with the AWS CDK CLI and custom credential plugins (CVE-2025-2598) |
|
| Software afectado | AmazonWS |
|
Publication Date: 2025/03/21 07:00 AM PDT Description AWS identified CVE-2025-2598, an issue in the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI), versions 2.172.0 through 2.178.1. The AWS CDK CLI is a command line tool that deploys AWS CDK applications onto AWS accounts. When customers run AWS CDK CLI commands with credential plugins and configure those plugins to return temporary credentials by including an expiration property, this issue can potentially result in More info: https://aws.amazon.com/security/security-bulletins/AWS-2025-005/ |
|
