writeups.xyz / AWS CloudTrail vulnerability: Undocumented API allows CloudTrail bypass

Submitter : c2a

Date: 17 January 2023

Bounty : undisclosed

Vulnerabilities :

• Cloud
• Logic Flaw
• CloudTrail Bypass

Programs :

• AWS

Authors :

• Nick Frichette (@Frichette_n)

Link :
https://securitylabs.datadoghq.com/articles/iamadmin-cloudtrail-bypass/