VDB
CVE-2023-35165
CVE-2023-35165
PUBLISHED
CVSS 6.599999904632568 MEDIUM
AWS CDK EKS overly permissive trust policies
EPSS 0.07% · 20.4th percentile
Risk Scores
CVSS 3.1
6.599999904632568
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.07%
20.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| amazon | aws_cloud_development_kit | 1.57.0, 2.0.0 |
| aws | aws-cdk | aws-cdk-lib >= 2.0.0, < 2.80.0, @aws-cdk/aws-eks >= 1.57.0, < 1.202.0 |
| aws-cdk | aws-eks | 1.57.0 |
| npm | aws-cdk-lib | 2.0.0 |
Exploit Intelligence
Timeline
- Jun 19, 2023 CVE Published
- Jun 20, 2023 CVE Updated
- Jun 24, 2023 EPSS Score
- Jul 29, 2023 EPSS Score
- Sep 2, 2023 EPSS Score
- Oct 8, 2023 EPSS Score
- Nov 12, 2023 EPSS Score
- Dec 17, 2023 EPSS Score
- Jan 21, 2024 EPSS Score
- Feb 25, 2024 EPSS Score
- Apr 1, 2024 EPSS Score
- May 6, 2024 EPSS Score