Due to an insecure role configuration, it is possible to obtain administrative access or privileges using a standard user account.
Get access to information and operations that should not be available for the current role.
The roles must be controlled with users tokens or the exposure of user ID must be avoided.
Authenticated attacker from the Internet.
Expected Remediation Time
⌚ 60 minutes.
Default score using CVSS 3.1. It may change depending on the context of the vulnerability.
- Attack vector: N
- Attack complexity: H
- Privileges required: H
- User interaction: N
- Scope: C
- Confidentiality: H
- Integrity: H
- Availability: H
- Exploit code madurity: X
- Remediation level: X
- Report confidence: X
- Vector string: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:X
- Base: 8.0
- Temporal: 8.0
- Base: High
- Temporal: High
Every user role should have clearly defined authorization restrictions to resources
Non compliant code
The application uses a resource with unrestricted access or not correctly configured restrictions
- - 'arn:aws:s3:::'
An IAM configuration with a PassRole that uses a wild card access
- Effect: Allow
Search for vulnerabilities in your apps for free with our automated security testing! Start your 21-day free trial and discover the benefits of our Continuous Hacking Machine Plan. If you prefer a full service that includes the expertise of our ethical hackers, don't hesitate to contact us for our Continuous Hacking Squad Plan.