Product
AWS CDK
- First Reported
- Apr 29, 2025
- Latest Reported
- Apr 29, 2025
Reported Context (1)
- the internal behaviour of services like CloudFormation, SageMaker, Glue, EMR, as well as tools like the AWS CDK – escalating their privileges far beyond the original scope of the role. Overly Broad AWS Default Roles Could Enable Cross-Service Privilege Escalation
MITRE ATT&CK (4)
Vendors (2)
Products (9)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.