VDB
CVE-2023-35165
CVE-2023-35165
PUBLISHED
CVSS 6.599999904632568 MEDIUM
AWS CDK EKS overly permissive trust policies
EPSS 0.90% · 58.4th percentile
Risk Scores
CVSS 3.1
6.599999904632568
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.90%
58.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| amazon | aws_cloud_development_kit | 1.57.0, 2.0.0 |
| aws | aws-cdk | aws-cdk-lib >= 2.0.0, < 2.80.0, @aws-cdk/aws-eks >= 1.57.0, < 1.202.0 |
| aws-cdk | aws-eks | 1.57.0 |
| npm | aws-cdk-lib | 2.0.0 |
Timeline
- Jun 19, 2023 CVE Published
- Jun 20, 2023 CVE Updated
- Jun 24, 2023 EPSS Score
- Jul 30, 2023 EPSS Score
- Sep 4, 2023 EPSS Score
- Oct 10, 2023 EPSS Score
- Nov 14, 2023 EPSS Score
- Dec 20, 2023 EPSS Score
- Jan 25, 2024 EPSS Score
- Mar 1, 2024 EPSS Score
- Apr 6, 2024 EPSS Score
- May 12, 2024 EPSS Score