AWS Kubernetes container Image Builder exploit found

funkychicken — Thu, 17 Oct 2024 09:38:40 GMT

This is a simple one and used to be the same problem with SCCM builds on Microsoft.

The image builder processes uses a hard coded default username and password which can be used to exploit container builds.

Refer to this post for more:

topic AWS Kubernetes container Image Builder exploit found in Threats