How severe is CVE-2023-50928?

This vulnerability has a severity rating of CRITICAL with a CVSS score of 9 out of 10.

What type of vulnerability is CVE-2023-50928?

This is classified as CWE-284, which is a common weakness in software security.

CVE-2023-50928 - CRITICAL Severity | CVSS 9

Vulnerability Description

"Sandbox Accounts for Events" provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially claim and access empty AWS accounts by sending request payloads to the account API containing non-existent event ids and self-defined budget & duration. This issue only affects cleaned AWS accounts, it is not possible to access AWS accounts in use or existing data/infrastructure. This issue has been patched in version 1.1.0.

Related Vulnerabilities

CVE-2020-4062

CRITICAL

CVSS:9.0(Critical)

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full...

CWE-2842020