H3-2022-0089¶
Public Access to Amazon EBS Snapshot
| Category | SECURITY_MISCONFIGURATION |
| Base Score | 4.5 |
Description¶
An Amazon EBS Snapshot in your AWS account is publicly accessible, either to everyone or to any authenticated (cross-account) AWS user.
Impact¶
Attackers may be able to access sensitive data in the EBS snapshot such as browser history and stored passwords