CVE-2023-34085CWE-359

User Attribute Disclosure via DynamoDB Data Stores

Low · published October 25, 2023

CVSS v3.1
2.6
EPSS
0%
Percentile
39.4
In the wild
Unconfirmed
What it is

When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user using a maliciously crafted request

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00467 · 39.4th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2023-10-25T02:03Z
EPSS history
Timeline
  • 25 OCT 02:03Z
    User Attribute Disclosure via DynamoDB Data Stores
    cvelistv5