CVSS 3.0
6.1 mediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:NCVE-2018-13390
Medium (6.1) in atlassian cloudtoken. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in cloudtoken 0.1.24.
Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- atlassian:cloudtoken
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-4fpg-j5mp-783g | PyPI | cloudtoken | >=0.1.1 <0.1.24 | 0.1.24 |
| PYSEC-2018-1 | PyPI | cloudtoken | >=0.1.1 <0.1.24 | 0.1.24 |