CVE-2026-48032 : 상세 정보

CVE-2026-48032

2026-07-24
19h16 +00:00
2026-10-24
13h10 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, IAM-role policy checks can be bypassed when the role trusts multiple OIDC providers. This issue has been patched in version 1.4.0.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-697 Incorrect Comparison
The product compares two entities in a security-relevant context, but the comparison is incorrect.

참고 자료