Vulnerabilities > Amazon > Amazon WEB Services Cloudformation Bootstrap

DATE CVE VULNERABILITY TITLE RISK
2017-10-30 CVE-2017-9450 Improper Privilege Management vulnerability in Amazon web Services Cloudformation Bootstrap
The Amazon Web Services (AWS) CloudFormation bootstrap tools package (aka aws-cfn-bootstrap) before 1.4-19.10 allows local users to execute arbitrary code with root privileges by leveraging the ability to create files in an unspecified directory.
local
low complexity
amazon CWE-269
7.2