CVE-2018-15869

An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source…

published August 25, 2018

CVSS
—
EPSS
2%
Percentile
78.2
In the wild
Unconfirmed
What it is

An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source software per AWS recommended security best practices, may unintentionally load an undesired and potentially malicious Amazon Machine Image (AMI) from the uncurated public community AMI catalog.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01801 · 78.2th percentile
Published
2018-08-25T00:00Z
EPSS history
Timeline
  • 25 AUG 00:00Z
    An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source…
    cvelistv5