high7.5
CVE-2023-43784
Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component.
Impact
Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plesk | Onyx | Version 17.8.11 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.aws.amazon.com/IAM/latest/UserGuide/security-creds.html
- https://talk.plesk.com/threads/why-in-plesk-firehouse-aws-keys-are-public.369925/
- https://docs.aws.amazon.com/IAM/latest/UserGuide/security-creds.html
- https://talk.plesk.com/threads/why-in-plesk-firehouse-aws-keys-are-public.369925/