AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← Malware catalog

Attributed metadata history

REPORTPUBLIC METADATA

AWS CDK CLI Issue with Custom Credential Plugins

AWS identified a security issue in the AWS CDK CLI versions 2.172.0-2.178.1 where temporary credentials from custom credential plugins could be printed to console output. This potentially exposes sensitive information to users with access to the console. The issue affects plugins that include an expiration property when returning temporary credentials.

Reference details

Source category
Research & news
Report title
AWS CDK CLI Issue with Custom Credential Plugins
First reported
Mar 21, 2025 00:00 UTC
Last reported
Mar 21, 2025 00:00 UTC
Catalog updated
Oct 08, 2026 03:52 UTC
Record ID
5714c207a57501d0d3f8936f12e3804231e0b4a72e2a04ad347cde37d05bd633

Published indicators

Network indicators are visibly defanged. This page does not make them clickable or send them to another service.

No validated file hashes or network indicators are stored for this record.

Source observations

src_d11443da85ea659d49

Source-provided label
Not reported
Evidence class
mentioned in report
Confidence
Not reported
Observed
Mar 21, 2025 00:00 UTC
Retrieved
Oct 08, 2026 03:52 UTC

This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.

Review source update dates and status
  • src_d11443da85ea659d49Collection status unverifiedLast successful batch: Unverified

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.