VULNERABILITY INTELLIGENCE

CVE-2018-13390

CVSS score6.1 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2018-08-10
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Description

Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles.

Primary references