CVE-2018-19981 Information disclosure in n/a
The AWS SDK for Android stores temporary credentials in plain text, allowing attackers with root access to steal them and impersonate users.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-19981?
CVE-2018-19981 is a high-severity vulnerability in n/a, published on 4 Apr 2019. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use these credentials to create authenticated and/or authorized requests. Note that the attacker must have "root" privilege access to the Android filesystem in order to exploit this vulnerability (i.e. the device has been compromised, such as disabling or bypassing Android's fundamental security mechanisms).
Weakness: CWE-312
Which versions are affected by CVE-2018-19981?
It affects 1 product.
Products include Amazon Aws Software Development Kit.
How do I fix CVE-2018-19981?
No fix has been published for CVE-2018-19981 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-19981 being exploited?
There is no known exploitation of CVE-2018-19981 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2026-19642 Out-of-bounds write in the Base64 decoder in Amazon aws-sdk-cpp
- CVE-2026-19643 Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platforms
- CVE-2023-51651 Potential URI resolution path traversal in the AWS SDK for PHP
- CVE-2022-4725 AWS SDK XML Parser XpathUtils.java XpathUtils server-side request forgery
- CVE-2022-2582 Exposure of unencrypted plaintext hash in github.com/aws/aws-sdk-go
Sources
Also known as GHSA-4rp2-whvp-25jm.