high
AWS RDS local file read
Published Mon, Apr 11th, 2022
Platforms
Summary
A vulnerability was discovered in the Aurora PostgreSQL log_fdw extension for Amazon Relational Database Service (RDS), allowing an attacker to read files on the EC2 host and obtain credentials for an internal AWS service.
Affected Services
RDS
Remediation
None required
Tracked CVEs
No tracked CVEs
References
https://blog.lightspin.io/aws-rds-critical-security-vulnerabilityhttps://aws.amazon.com/security/security-bulletins/AWS-2022-004/
Contributed by https://github.com/0xdabbad00
Entry Status
Finalized
Disclosure Date
Thu, Dec 9th, 2021
Exploitability Period
-
Known ITW Exploitation
-
Detection Methods
None
Piercing Index Rating
-
Discovered by
Gafnit Amiga, Lightspin
