Amazon AWS Glue Database Password Disclosure

The password of database connections in AWS Glue is loaded into the website when a connection's edit page is requested. Principals with appropriate permissions can read the password. This behavior also increases the risk that database passwords will be intercepted by an attacker during transmission in the server response. Many types of vulnerabilities, such as broken access controls, cross site scripting and weaknesses in session handling, could enable an attacker to leverage this behavior to retrieve the passwords.

amazon amazon aws attacker aws aws glue can connections database disclosure edit page password passwords permissions response risk server transmission types types of vulnerabilities vulnerabilities website