A local file read vulnerability in Amazon’s Relational Database Service (RDS) could be exploited to allow an attacker to gain access to internal AWS credentials, the cloud behemoth has confirmed. Cloud security company Lightspin’s research team discovered the flaw and reported it to AWS, which applied an initial patch and worked with customers to mitigate the vulnerability.

Read full article on The Register