resolved
Privilege Escalation in Edit and Create Secret Endpoints Leads to Unauthorized Secret Modification
Bug reported by Ahmed Esmail was disclosed at April 24, 2025, 6:43 am | Improper Access Control - Generic
The vulnerability allows a user with the Builder role to list all existing secret names, create new secrets, and overwrite existing secrets by using the same name. This behavior violates permission boundaries and leads to privilege escalation and unauthorized access to sensitive data.
resolved
Non-Production API Endpoints for the ssm Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration
Bug reported by Nick Frichette (Datadog) was disclosed at April 24, 2025, 1:39 am | Insufficient Logging
The non-production API endpoints for the ssm service were found to fail to log to CloudTrail, resulting in silent permission enumeration. Eighteen non-production endpoints were identified that can be used with standard IAM credentials without generating CloudTrail logs.