Skip to content
This repository was archived by the owner on Jan 3, 2023. It is now read-only.
This repository was archived by the owner on Jan 3, 2023. It is now read-only.

Risk: over-authorization of AWS IoT policy #13

Open
Open
Risk: over-authorization of AWS IoT policy#13
@P-Verifier

Description

@P-Verifier
P-Verifier
opened on May 16, 2022

We are a security research team and we recently discovered that there is an over-authorization security issue with this project's IoT policy.
The affected file is as following:

1. iot-samples-cloud-setup/support/aws/aws-device-policy.json

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions