Skip to content
OpenAdvisories

Vendor

awslabs

10 known vulnerabilities.

Products

tough 3 sandbox-accounts-for-events 2 sockeye 1 aws-deployment-framework 1 aws-sdk-rust 1 fhir-works-on-aws-authz-smart 1 aws-dataall 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2023-30610

    AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending

    aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token…

    awslabs aws-sdk-rust aws-sigv4 crates.io
  • Medium 6.5
    CVE-2022-39230

    Security issue in fhir-works-on-aws-authz-smart

    fhir-works-on-aws-authz-smart is an implementation of the authorization interface from the FHIR Works interface. Versions 3.1.1 and 3.1.2 are subject to Exposure of Sensitive Information to an Unauthorized Actor. This issue allows a client of the API to retri…

    awslabs fhir-works-on-aws-authz-smart fhir-works-on-aws-authz-smart npm