low

S3 bucket tagging not restricted

Published Mon, Sep 28th, 2020
Platforms

Summary

Lack of the privilege s3:PutBucketTagging did not restrict the ability to tag S3 buckets.

Affected Services

S3

Remediation

None required

Tracked CVEs

No tracked CVEs

References

Disclosure Date
Mon, Sep 28th, 2020
Exploitablity Period
-
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Ian Mckay