VDB
CVE-2024-52314
CVE-2024-52314
PUBLISHED
CVSS 6.900000095367432 MEDIUM
A data.all admin team member who has access to the customer-owned AWS Account where data.all is deployed may be able to extract user data from data.all application logs in data.all via CloudWatch log scanning for particular operations that interact with customer producer teams data.
EPSS 0.40% · 32.1th percentile
Risk Scores
CVSS 4.0
6.900000095367432
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.40%
32.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| amazon | data.all | 1.0.0, 1.0.0, 1.0.0 |
Timeline
- Nov 9, 2024 EPSS Score
- Nov 9, 2024 Coalition ESS Score
- Nov 9, 2024 CVE Published
- Nov 9, 2024 PoC Published
- Nov 12, 2024 Coalition ESS Score
- Nov 27, 2024 EPSS Score
- Dec 17, 2024 EPSS Score
- Jan 4, 2025 EPSS Score
- Jan 22, 2025 EPSS Score
- Feb 10, 2025 EPSS Score
- Feb 28, 2025 EPSS Score
- Mar 18, 2025 EPSS Score