CVE-2018-15869
Medium
Description
An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source software per AWS recommended security best practices, may unintentionally load an undesired and potentially malicious Amazon Machine Image (AMI) from the uncurated public community AMI catalog.
SeverityMedium
CVSS5.3
Exploit probability—
ProductHashicorp Packer
PublishedAug 25, 2018
First seenAug 25, 2018
How to fix
Update
- hashicorp packer1.3.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hashicorp packer | v < 1.3.0 | 1.3.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.