PT-2018-11792 · Aws · Cloudtoken Daemon

Published 2018-08-10 · Updated 2022-05-13 · CVE-2018-13390

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions cloudtoken daemon versions 0.1.1 through 0.1.23

Description The issue allows unauthenticated access to the cloudtoken daemon on Linux systems via the network, enabling attackers on the same subnet to obtain temporary AWS credentials for the users' roles.

Recommendations For cloudtoken daemon versions 0.1.1 through 0.1.23, update to version 0.1.24 or later to resolve the issue.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2018-13390

GHSA-4FPG-J5MP-783G

PYSEC-2018-1

Affected Products

Cloudtoken Daemon

References · 6

• https://osv.dev/vulnerability/GHSA-4fpg-j5mp-783g · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2018-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-13390 · Security Note
• https://osv.dev/vulnerability/CVE-2018-13390 · Vendor Advisory
• https://github.com/pypa/advisory-database/tree/main/vulns/cloudtoken/PYSEC-2018-1.yaml · Note
• https://bitbucket.org/atlassian/cloudtoken/wiki/CVE-2018-13390%20-%20Exposed%20credentials%20in%20daemon%20mode%20on%20Linux · Note