Summary
A vulnerability was discovered in the Aurora PostgreSQL log_fdw extension
for Amazon Relational Database Service (RDS), allowing an attacker to read
files on the EC2 host and obtain credentials for an internal AWS service.
Affected Services
RDS
Remediation
None required
Tracked CVEs
No tracked CVEs
References
https://blog.lightspin.io/aws-rds-critical-security-vulnerabilityhttps://aws.amazon.com/security/security-bulletins/AWS-2022-004/
Contributed by https://github.com/0xdabbad00
Disclosure Date
Thu, Dec 9th, 2021
Exploitablity Period
-
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Gafnit Amiga, Lightspin
