Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AWS Credential Report detail view incorrectly flags disabled credentials #1621

Closed
rieck-srlabs opened this issue Apr 12, 2024 · 1 comment
Closed
Labels
bug Something isn't working potential Unconfirmed issue

Comments

@rieck-srlabs
Copy link
Contributor

Describe the bug

AWS's credential report rule ("Credentials Unused for 90 Days or Greater Are Not Disabled") correctly flags users that have credentials which have been unused for at least 90 days and which are enabled.

However, the detail overview highlights not just the affected credentials in red, but all credentials, even disabled ones or credentials that are newer than 90 days:

Screenshot 2024-04-12 at 14 19 37

In the screenshot above:

  1. Password is highlighted despite being disabled
  2. Access Key 2 is highlighted despite not being active
  3. (Active access keys that have recently been used are also highlighted in red, as long as there is another access key that has not been used recently. Note that this problem is not highlighted in the screenshot above)

To Reproduce

Run ScoutSuite with no parameter against an account that has a user with an access key that has not been used for at least 90 days:

$ scout aws

Additional context

n/a

@rieck-srlabs
Copy link
Contributor Author

Closing issue, as the fix was merged and is included in the latest release.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working potential Unconfirmed issue
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant