Improper Access Control
The cloudtoken daemon on Linux allows attackers on the same subnet to gain temporary AWS credentials.
Advisories for Pypi/Cloudtoken package
2018
The cloudtoken daemon on Linux allows attackers on the same subnet to gain temporary AWS credentials.