Hacking the Cloud on Mythryl: “CVE-2024-28056 is not only a cross-account story. If an AWS account…”

CVE-2024-28056 is not only a cross-account story. If an AWS account still has an old vulnerable Amplify role and a same-account Cognito identity pool with classic authflow, role takeover may still be possible.

buff.lyCVE-2024-28056: Exploit an AWS Amplify Vulnerability in Same-Account Scenarios - Hacking The CloudAn in-depth explanation of how to still abuse CVE-2024-28056, a vulnerability in AWS Amplify that exposed IAM roles to takeover.

21/5/26, 2:03 pm0 reposts1 like

Post