Reported Amazon RDS PostgreSQL issue

Initial Publication Date: 2022/04/11 16:45 PST

A security researcher recently reported an issue with Aurora PostgreSQL. Using this issue, they were able to gain access to internal credentials that were specific to their Aurora cluster. No cross-customer or cross-cluster access was possible; however, highly privileged local database users who could exercise this issue could potentially have gained additional access to data hosted in their cluster or read files within the operating system of the underlying host running their database.

This …

amazon postgresql rds