Vulnerability Bulletins

CVE-2024-28056


System information

   
Affected software AmazonWS

Description

Publication Date: 2024/04/15 07:00 AM PST AWS is aware of CVE-2024-28056, which affects Amplify CLI versions prior to 12.10.1. We released a fix to Amplify on January 10, 2024, and recommend customers upgrade to 12.10.1 to address this issue. We have proactively communicated with the customers using affected versions. AWS has taken additional steps to protect customers using Amplify from unintentional misconfigurations. AWS added a mitigation to the AWS Security Token Service (STS) where

More info:

https://aws.amazon.com/security/security-bulletins/AWS-2024-003/

Standar resources

Property Value
CVE CVE-2024-28056.

Version history

Version Comments Date
Ministerio de Defensa
CNI
CCN
CCN-CERT