Vulnérabilités connues pour Amazon data.all
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2024-52314 | A data.all admin team member who has access to the customer-owned AWS Account where data.all is deployed may be able… | 6.9 Moyenne | 9 nov. 2024 |
| CVE-2024-52312 | Due to inconsistent authorization permissions, data.all may allow an external actor with an authenticated account to… | 5.3 Moyenne | 9 nov. 2024 |
| CVE-2024-52313 | An authenticated data.all user is able to manipulate a getDataset query to fetch additional information regarding the… | 5.3 Moyenne | 9 nov. 2024 |
| CVE-2024-10953 | An authenticated data.all user is able to perform mutating UPDATE operations on persisted Notification records in… | 5.3 Moyenne | 9 nov. 2024 |
| CVE-2024-52311 | Authentication tokens issued via Cognito in data.all are not invalidated on log out, allowing for previously… | 5.3 Moyenne | 9 nov. 2024 |
Autres produits Amazon
Amazon Athena ODBC driver 6
strands-agents-tools 3
WorkSpaces Client 2
Kiro IDE 2
Amazon Redshift JDBC Driver 2
Ion-C 2
FreeRTOS-Plus-TCP 2
Fire TV Stick 3rd gen 2
amazon-connect-salesforce-lambda 1
Amazon OpenSearch Service 1
Amazon Redshift Python Connector 1
Amazon.ApplicationLoadBalancer.Identity.AspNetCore Middleware 1