GCVE-110-CLOUD-2020-0008

Advisory Published

Vulnetix · Advisory published October 17, 2020

An attacker who gained access to IAM credentials could enumerate a subset of the privileges they had access to without logging to CloudTrail. This would allow them to perform the typically noisy permission enumeration process undetected.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
AWS	IAM	—	—
AWS	CloudTrail	—	—

References

Enumeration of Privileges Without Being Logged to CloudTrail

advisory

Browse GCVE Records

74,608 records in the GCVE database · Updated July 24, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON