Approved changes feed: RSS · Atom

cpe:2.3:a:aws:cloud_development_kit_command_line_interface:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAws (e6707f00-6abb-51df-808c-9e3417305027)
ProductCloud Development Kit Command Line Interface (037df4a7-dc97-59e8-93aa-edcc26f422e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2598 vulnerable 2026-06-03 15:00:26.069488 AWS CDK CLI prints AWS credentials retrieved by custom credential plugins
MEDIUM (5.5)
When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with a credential plugin which returns an expiration property with the retrieved AWS credentials, the credentials are printed to the console output. To mitigate this issue, users should upgrade to version 2.178.2 or later and ensure any forked or derivative code is patched to incorporate the new fixes.
Published: 2025-03-21T14:14:29.040Z
Updated: 2025-10-14T18:38:18.174Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.