RSS   Vulnerabilities for 'Packer'   RSS

2018-08-24
 
CVE-2018-15869

CWE-732
 

 
An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source software per AWS recommended security best practices, may unintentionally load an undesired and potentially malicious Amazon Machine Image (AMI) from the uncurated public community AMI catalog.

 

 >>> Vendor: Hashicorp 15 Products
Vagrant vmware fusion
Vagrant
Terraform
Consul
Nomad
Packer
Vault
Terraform enterprise
Vault-ssh-helper
Go-slug
Vault provider for secrets store csi driver
Terraform provider
Vault-action
Sentinel
Go-getter


Copyright 2024, cxsecurity.com

 

Back to Top