Skip to content
OpenAdvisories

Package · PyPI

cloudtoken

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2018-13390

    Cloudtoken Insufficiently Protects Credentials

    Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles.

    Atlassian cloudtoken cloudtoken PyPI