writeups.xyz / Spotted: How we discovered Privilege Escalation, missing CloudTrail data and a race condition in AWS Directory Service

Submitter : c2a

Date: 7 June 2023

Bounty : undisclosed

Vulnerabilities :

• Cloud
• Privilege Escalation
• Race Condition

Programs :

• AWS

Authors :

• Ben Bridts (@Benbridts)

Link :
https://cloudar.be/awsblog/spotted-privilege-escalation-in-aws-directory-service/