VDB

GCVE-110-CLOUD-2024-0042

GCVE-110-CLOUD-2024-0042
Advisory Published
Vulnetix · Advisory published April 11, 2024
A principal with the permissions glue:GetConnection and ec2:DescribeSubnets can retrieve the database password of a connection, since the password is loaded into the AWS console website when a connection's edit page is requested. The severity of this issue is low since it requires sufficient prior access.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
AWSConnect——
AWSCloud Services——
AWSGlue——
AWSEC2——

References

AWS Glue database password leakage
advisory
advisory

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›