Attributed metadata history

Up to 100 retained publisher events per page for e6a5a9c98e6e65f2b61dd26ed2b58468c0de0bc5e153f1d58977d56fee36b5c5. Withdrawals and unavailable references remain attributed to their publishers.

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:03 UTC

AWS Directory Service didn't check the iam:PassRole permissions when using the EnableRoleAccess action. This could have been used for privilege escalation by an authenticated user with sufficient permissions (ds:EnableRoleAccess), if the role had a trust policy that allowed use by Directory Service.

Fingerprint: 61a9a953f5739baa3741e02f1e707a37ee98f1eb81f6f7aa476a999ac5e177d3

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:03 UTC

available

Fingerprint: 46fd50ac705e064c7517d97d61b5ec511c9b1ada6209622159dd39573ba08e5c