Beveiligingsadvies

CVE-2026-6912

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-24 16:11:45

Laatst bijgewerkt 2026-04-24 16:48:22

Toegewezen door AMZN

CVSS-score 8.8

Status PUBLISHED

Beschrijving

Improperly controlled modification of dynamically-determined object attributes in the Cognito User Pool configuration in AWS Ops Wheel before PR #165 allows remote authenticated users to escalate to deployment admin privileges and manage Cognito user accounts via a crafted UpdateUserAttributes API call that sets the custom:deployment_admin attribute. To remediate this issue, users should redeploy from the updated repository and ensure any forked or derivative code is patched to incorporate the new fixes.

← Alle CVE's bekijken Bekijk op cve.org ↗