CVE-2023-43784
N/A
N/A
Summary
Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
CVE Program Container
Additional References
- https://talk.plesk.com/threads/why-in-plesk-firehouse-aws-keys-are-public.369925/
- https://docs.aws.amazon.com/IAM/latest/UserGuide/security-creds.html
References
- https://talk.plesk.com/threads/why-in-plesk-firehouse-aws-keys-are-public.369925/
- https://docs.aws.amazon.com/IAM/latest/UserGuide/security-creds.html
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.