{"id":2547,"date":"2024-08-23T10:11:00","date_gmt":"2024-08-23T09:11:00","guid":{"rendered":"https:\/\/acebau.com\/?p=2547"},"modified":"2024-08-23T10:11:02","modified_gmt":"2024-08-23T09:11:02","slug":"aws","status":"publish","type":"post","link":"https:\/\/acebau.com\/index.php\/aws\/","title":{"rendered":"AWS Configuration Issue Could Expose Thousands of Web Apps"},"content":{"rendered":"\n<p><strong>A VULNERABILITY RELATED<\/strong>&nbsp;to Amazon Web Service&#8217;s traffic-routing service known as Application Load Balancer could have been exploited by an attacker to bypass access controls and compromise web applications, according to new research. The flaw stems from a customer implementation issue, meaning it isn&#8217;t caused by a software bug. Instead, the exposure was introduced by the way AWS users set up authentication with Application Load Balancer.<\/p>\n\n\n\n<p>Implementation issues are a crucial component of cloud security in the same way that the contents of an armored safe aren&#8217;t protected if the door is left ajar. Researchers from the security firm Miggo\u00a0found\u00a0that, depending on how Application Load Balancer authentication was set up, an attacker could potentially manipulate its hand-off to a third-party corporate authentication service to access the target web application and view or exfiltrate data.<\/p>\n\n\n\n<p>The researchers say that looking at publicly reachable web applications, they have identified more than 15,000 that appear to have vulnerable configurations. AWS disputes this estimate, though, and says that \u201ca small fraction of a percent of AWS customers have applications potentially badly configured in this way, significantly fewer than the researchers&#8217; estimate.\u201d The company also says that it has contacted each customer on its shorter list to recommend a more secure implementation. AWS does not have access or visibility into its clients&#8217; cloud environments, though, so any exact number is just an estimate.<\/p>\n\n\n\n<p><a href=\"https:\/\/www.wired.com\/story\/aws-application-load-balancer-implementation-compromise\/\">>>More<\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A VULNERABILITY RELATED&nbsp;to Amazon Web Service&#8217;s traffic-routing service known as Application Load Balancer could have been exploited by an attacker to bypass access controls and compromise web applications, according to new research. The flaw stems from a customer implementation issue,&hellip;<\/p>\n","protected":false},"author":1,"featured_media":48,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[41,46],"tags":[],"class_list":["post-2547","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business-news","category-it-news"],"aioseo_notices":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AWS Configuration Issue Could Expose Thousands of Web Apps - ACEBAU.com %<\/title>\n<meta name=\"description\" content=\"AWS Configuration Issue Could Expose Thousands of Web Apps - ACEBAU.com - Business News\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/acebau.com\/index.php\/aws\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AWS Configuration Issue Could Expose Thousands of Web Apps - ACEBAU.com %\" \/>\n<meta property=\"og:description\" content=\"AWS Configuration Issue Could Expose Thousands of Web Apps - ACEBAU.com - Business News\" \/>\n<meta property=\"og:url\" content=\"https:\/\/acebau.com\/index.php\/aws\/\" \/>\n<meta property=\"og:site_name\" content=\"ACEBAU.com\" \/>\n<meta property=\"article:published_time\" content=\"2024-08-23T09:11:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-08-23T09:11:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/acebau.com\/wp-content\/uploads\/2020\/03\/OurSuccess-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"500\" \/>\n\t<meta property=\"og:image:height\" content=\"334\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"sysadmin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"sysadmin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/acebau.com\\\/index.php\\\/aws\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/acebau.com\\\/index.php\\\/aws\\\/\"},\"author\":{\"name\":\"sysadmin\",\"@id\":\"https:\\\/\\\/acebau.com\\\/#\\\/schema\\\/person\\\/13f68e5a7b25ef1814fd9635f92395ed\"},\"headline\":\"AWS Configuration Issue Could Expose Thousands of Web Apps\",\"datePublished\":\"2024-08-23T09:11:00+00:00\",\"dateModified\":\"2024-08-23T09:11:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/acebau.com\\\/index.php\\\/aws\\\/\"},\"wordCount\":243,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/acebau.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/acebau.com\\\/index.php\\\/aws\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/acebau.com\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/OurSuccess-1.jpg\",\"articleSection\":[\"Business News\",\"IT News\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/acebau.com\\\/index.php\\\/aws\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/acebau.com\\\/index.php\\\/aws\\\/\",\"url\":\"https:\\\/\\\/acebau.com\\\/index.php\\\/aws\\\/\",\"name\":\"AWS Configuration Issue Could Expose Thousands of Web Apps - ACEBAU.com %\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/acebau.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/acebau.com\\\/index.php\\\/aws\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/acebau.com\\\/index.php\\\/aws\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/acebau.com\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/OurSuccess-1.jpg\",\"datePublished\":\"2024-08-23T09:11:00+00:00\",\"dateModified\":\"2024-08-23T09:11:02+00:00\",\"description\":\"AWS Configuration Issue Could Expose Thousands of Web Apps - ACEBAU.com - Business News\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/acebau.com\\\/index.php\\\/aws\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/acebau.com\\\/index.php\\\/aws\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/acebau.com\\\/index.php\\\/aws\\\/#primaryimage\",\"url\":\"https:\\\/\\\/acebau.com\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/OurSuccess-1.jpg\",\"contentUrl\":\"https:\\\/\\\/acebau.com\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/OurSuccess-1.jpg\",\"width\":500,\"height\":334,\"caption\":\"ACEBAU | Computer Consultancy\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/acebau.com\\\/index.php\\\/aws\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/acebau.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"All Posts\",\"item\":\"https:\\\/\\\/acebau.com\\\/index.php\\\/category\\\/all-posts\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Business News\",\"item\":\"https:\\\/\\\/acebau.com\\\/index.php\\\/category\\\/all-posts\\\/business-news\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"AWS Configuration Issue Could Expose Thousands of Web Apps\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/acebau.com\\\/#website\",\"url\":\"https:\\\/\\\/acebau.com\\\/\",\"name\":\"ACEBAU.com\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/acebau.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/acebau.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/acebau.com\\\/#organization\",\"name\":\"Titan Atlas Limited\",\"url\":\"https:\\\/\\\/acebau.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/acebau.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.titanatlas.co.uk\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/header-1-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.titanatlas.co.uk\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/header-1-1.jpg\",\"width\":1280,\"height\":375,\"caption\":\"Titan Atlas Limited\"},\"image\":{\"@id\":\"https:\\\/\\\/acebau.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"http:\\\/\\\/uk.linkedin.com\\\/pub\\\/kevin-edwards\\\/14\\\/183\\\/93a\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/acebau.com\\\/#\\\/schema\\\/person\\\/13f68e5a7b25ef1814fd9635f92395ed\",\"name\":\"sysadmin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8df4a06f071691af7653e07df6d69836014ef6027d0cbe3398ccf5d50c9ecb32?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8df4a06f071691af7653e07df6d69836014ef6027d0cbe3398ccf5d50c9ecb32?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8df4a06f071691af7653e07df6d69836014ef6027d0cbe3398ccf5d50c9ecb32?s=96&d=mm&r=g\",\"caption\":\"sysadmin\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AWS Configuration Issue Could Expose Thousands of Web Apps - ACEBAU.com %","description":"AWS Configuration Issue Could Expose Thousands of Web Apps - ACEBAU.com - Business News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/acebau.com\/index.php\/aws\/","og_locale":"en_GB","og_type":"article","og_title":"AWS Configuration Issue Could Expose Thousands of Web Apps - ACEBAU.com %","og_description":"AWS Configuration Issue Could Expose Thousands of Web Apps - ACEBAU.com - Business News","og_url":"https:\/\/acebau.com\/index.php\/aws\/","og_site_name":"ACEBAU.com","article_published_time":"2024-08-23T09:11:00+00:00","article_modified_time":"2024-08-23T09:11:02+00:00","og_image":[{"width":500,"height":334,"url":"https:\/\/acebau.com\/wp-content\/uploads\/2020\/03\/OurSuccess-1.jpg","type":"image\/jpeg"}],"author":"sysadmin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"sysadmin","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/acebau.com\/index.php\/aws\/#article","isPartOf":{"@id":"https:\/\/acebau.com\/index.php\/aws\/"},"author":{"name":"sysadmin","@id":"https:\/\/acebau.com\/#\/schema\/person\/13f68e5a7b25ef1814fd9635f92395ed"},"headline":"AWS Configuration Issue Could Expose Thousands of Web Apps","datePublished":"2024-08-23T09:11:00+00:00","dateModified":"2024-08-23T09:11:02+00:00","mainEntityOfPage":{"@id":"https:\/\/acebau.com\/index.php\/aws\/"},"wordCount":243,"commentCount":0,"publisher":{"@id":"https:\/\/acebau.com\/#organization"},"image":{"@id":"https:\/\/acebau.com\/index.php\/aws\/#primaryimage"},"thumbnailUrl":"https:\/\/acebau.com\/wp-content\/uploads\/2020\/03\/OurSuccess-1.jpg","articleSection":["Business News","IT News"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/acebau.com\/index.php\/aws\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/acebau.com\/index.php\/aws\/","url":"https:\/\/acebau.com\/index.php\/aws\/","name":"AWS Configuration Issue Could Expose Thousands of Web Apps - ACEBAU.com %","isPartOf":{"@id":"https:\/\/acebau.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/acebau.com\/index.php\/aws\/#primaryimage"},"image":{"@id":"https:\/\/acebau.com\/index.php\/aws\/#primaryimage"},"thumbnailUrl":"https:\/\/acebau.com\/wp-content\/uploads\/2020\/03\/OurSuccess-1.jpg","datePublished":"2024-08-23T09:11:00+00:00","dateModified":"2024-08-23T09:11:02+00:00","description":"AWS Configuration Issue Could Expose Thousands of Web Apps - ACEBAU.com - Business News","breadcrumb":{"@id":"https:\/\/acebau.com\/index.php\/aws\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/acebau.com\/index.php\/aws\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/acebau.com\/index.php\/aws\/#primaryimage","url":"https:\/\/acebau.com\/wp-content\/uploads\/2020\/03\/OurSuccess-1.jpg","contentUrl":"https:\/\/acebau.com\/wp-content\/uploads\/2020\/03\/OurSuccess-1.jpg","width":500,"height":334,"caption":"ACEBAU | Computer Consultancy"},{"@type":"BreadcrumbList","@id":"https:\/\/acebau.com\/index.php\/aws\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/acebau.com\/"},{"@type":"ListItem","position":2,"name":"All Posts","item":"https:\/\/acebau.com\/index.php\/category\/all-posts\/"},{"@type":"ListItem","position":3,"name":"Business News","item":"https:\/\/acebau.com\/index.php\/category\/all-posts\/business-news\/"},{"@type":"ListItem","position":4,"name":"AWS Configuration Issue Could Expose Thousands of Web Apps"}]},{"@type":"WebSite","@id":"https:\/\/acebau.com\/#website","url":"https:\/\/acebau.com\/","name":"ACEBAU.com","description":"","publisher":{"@id":"https:\/\/acebau.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/acebau.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/acebau.com\/#organization","name":"Titan Atlas Limited","url":"https:\/\/acebau.com\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/acebau.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.titanatlas.co.uk\/wp-content\/uploads\/2020\/03\/header-1-1.jpg","contentUrl":"https:\/\/www.titanatlas.co.uk\/wp-content\/uploads\/2020\/03\/header-1-1.jpg","width":1280,"height":375,"caption":"Titan Atlas Limited"},"image":{"@id":"https:\/\/acebau.com\/#\/schema\/logo\/image\/"},"sameAs":["http:\/\/uk.linkedin.com\/pub\/kevin-edwards\/14\/183\/93a"]},{"@type":"Person","@id":"https:\/\/acebau.com\/#\/schema\/person\/13f68e5a7b25ef1814fd9635f92395ed","name":"sysadmin","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/8df4a06f071691af7653e07df6d69836014ef6027d0cbe3398ccf5d50c9ecb32?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8df4a06f071691af7653e07df6d69836014ef6027d0cbe3398ccf5d50c9ecb32?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8df4a06f071691af7653e07df6d69836014ef6027d0cbe3398ccf5d50c9ecb32?s=96&d=mm&r=g","caption":"sysadmin"}}]}},"_links":{"self":[{"href":"https:\/\/acebau.com\/index.php\/wp-json\/wp\/v2\/posts\/2547","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/acebau.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/acebau.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/acebau.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/acebau.com\/index.php\/wp-json\/wp\/v2\/comments?post=2547"}],"version-history":[{"count":1,"href":"https:\/\/acebau.com\/index.php\/wp-json\/wp\/v2\/posts\/2547\/revisions"}],"predecessor-version":[{"id":2548,"href":"https:\/\/acebau.com\/index.php\/wp-json\/wp\/v2\/posts\/2547\/revisions\/2548"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/acebau.com\/index.php\/wp-json\/wp\/v2\/media\/48"}],"wp:attachment":[{"href":"https:\/\/acebau.com\/index.php\/wp-json\/wp\/v2\/media?parent=2547"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/acebau.com\/index.php\/wp-json\/wp\/v2\/categories?post=2547"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/acebau.com\/index.php\/wp-json\/wp\/v2\/tags?post=2547"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}