Risk: over-authorization of AWS IoT policy

Infineon / amazon-freertos

IoT operating system for microcontrollers. https://aws.amazon.com/freertos/

MIT License

10 stars 10 forks source link

Risk: over-authorization of AWS IoT policy #27

Open P-Verifier opened 2 years ago

P-Verifier commented 2 years ago

We are a security research team and we recently discovered that there is an over-authorization security issue with this project's IoT policy. The affected file is as following:

1. amazon-freertos/vendors/infineon/boards/xmc4700_relaxkit/README.md