Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| cloudtoken(PyPI) | 0.1.1 | 0.1.24 | N/A |
CVSS Metrics
