low

S3 bucket tagging not restricted

Published Mon, Sep 28th, 2020
Platforms

Summary

Lack of the privilege s3:PutBucketTagging did not restrict the ability to tag S3 buckets.

Affected Services

S3

Remediation

None required

Tracked CVEs

No tracked CVEs

References

Entry Status
Finalized
Disclosure Date
Mon, Sep 28th, 2020
Exploitablity Period
-
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Ian Mckay