PMapper Not Catching Cloudformation UpdateStack Risks

[ncc-erik-steringer]

Describe the bug

PMapper is supposed to identify when someone can abuse cloudformation:UpdateStack to leverage a stack for extra permissions. It appears this did not happen per https://labs.bishopfox.com/tech-blog/iam-vulnerable-assessing-the-aws-assessment-tools#What-privesc%20paths%20does%20each%20tool%20support .

TODOs

• [x] Verify the bug
• [x] Identify why the current codebase isn't catching this (see: https://github.com/nccgroup/PMapper/blob/722efec4f7c89a5a440facd8a5bd055c88db7194/principalmapper/graphing/cloudformation_edges.py#L144-L160 )
• [x] Implement a fix

[ncc-erik-steringer]

Fix made in 29a57ee and will be included in v1.1.4 release. Source of the bug was a miss on capitalization!

[ncc-erik-steringer]

v1.1.4 is out, closing.