Amazon QDetector Library Sign in to Amazon Q

Amazon Q

Detector Library

Python detectors (137/137)

Improper privilege management Langchain Insecure Maxiteration Spawning a process without main module Integer overflow Catch and swallow exception Insufficient Logging CDK Unauthenticated LDAP requests Path traversal Loose file permissions Exposure of Sensitive Information CDK Improper resource exposure File injection Incorrect use of Process.terminate API XML External Entity Pytorch use nondeterministic algoritm Tensorflow enable ops determinism Outdated subprocess module API Improper input validation Improper authentication Semaphore overflow prevention Insecure cookie Usage of an API that is not recommended - Low Severity Socket connection timeout AWS client not reused in a Lambda function Leaky subprocess timeout Pytorch disable gradient calculation Risky use of dict get method XPath injection Missing authorization Multidimensional list initialization using replication is error prone SQL injection Pytorch miss call to eval AWS AppConfig Improper certificate validation URL redirection to untrusted site Mutually exclusive call Notebook best practice violation Stack trace exposure Use of a deprecated method AWS api logging disabled cdk OS command injection Missing Authorization CDK Zip bomb attack Sensitive data stored unencrypted due to partial encryption Synchronous publication of AWS Lambda metrics Avoid using strptime to format iso dates Unrestricted upload of dangerous file type Pytorch redundant softmax Insecure connection using unencrypted protocol Unauthenticated Amazon SNS unsubscribe requests might succeed Insecure Socket Bind Insecure CORS policy Cross-site request forgery Absolute path usage Session fixation Garbage collection prevention in multiprocessing Catch and rethrow exception Weak algorithm used for Password Hashing Missing none check on response metadata AWS cost optimization cdk Sensitive information leak Client-side KMS reencryption Override of reserved variable names in a Lambda function Direct dict object modification Catastrophic backtracking regex Resource management errors cdk Resource leak Tensorflow redundant softmax AWS insecure transmission CDK Public method parameter validation Improper error handling Time zone aware datetimes Pytorch control sources of randomness Deadlocks caused by improper multiprocessing API usage Improper Neutralization of Input Used in a Command (Command Injection)Low maintainability with low class cohesion Untrusted AMI images Notebook invalid execution order Confusion between equality and identity in conditional expression Pytorch sigmoid before bceloss Pytorch data loader with multiple workers Pytorch avoid softmax with nllloss Pytorch miss call to zero grad Empty Password Error prone sequence modification AWS missing encryption of sensitive data cdk Bad exception handling Use of Default Credentials CDK Notebook variable redefinition Do not pass generic exception rule Usage of an API that is not recommended - High Severity Insecure cryptography S3 partial encrypt CDK Cross-site scripting Mutable objects as default arguments of functions Violation of PEP8 programming recommendations Insecure temporary file or directory Complex code hard to maintain aws kmskey encryption cdk Usage of an API that is not recommended Enabling and overriding debug feature Deserialization of untrusted object Use of an inefficient or incorrect API Avoid using nondeterministic Tensorflow API Inefficient string concatenation inside loop Improper sanitization of wildcards or matching symbols Insecure hashing Using AutoAddPolicy or WarningPolicy Log injection Weak obfuscation of web request Socket close platform compatibility Unsanitized input is run as code Batch request with unchecked failures Inefficient polling of AWS resource Hardcoded interface binding Hardcoded IP address Hardcoded credentials Server-side request forgery Module injection Unnecessary iteration Tensorflow control sources of randomness Dangling External Dependencies in Python Missing Authentication for Critical Function CDK Usage of an API that is not recommended - Medium Severity Unsafe Cloudpickle Load Incorrect binding of SNS publish operations Incorrect type conversion or cast Improper Neutralization of Special Elements in Template Engine PyTorch create tensors directly on device Inefficient new method from hashlib Dangerous global variables Multiple values in return statement is prone to error LDAP injection Clear text credentials Missing S3 bucket owner condition Logging of sensitive information AWS missing encryption CDK

Tag: access-control

Improper privilege management

Privilege escalation happens when a malicious user gains elevated access to resources that should be unavailable to them.

Unauthenticated LDAP requests

Unauthenticated LDAP requests can allow untrusted access to LDAP servers.

Loose file permissions

Weak file permissions can lead to privilege escalation.

Improper resource exposure

Exposing resource information makes the resource vulnerable to attack.

Improper authentication

Your code doesn't sufficiently authenticate identities provided by its users.

Improper certificate validation

Lack of validation of a security certificate can lead to host impersonation and sensitive data leaks.

Unauthenticated Amazon SNS unsubscribe requests might succeed

Failing to set the AuthenticateOnUnsubscribe flag to True when confirming an SNS subscription can lead to unauthenticated cancellations.

Session fixation

Session fixation might allow an attacker to steal authenticated session IDs.

Clear text credentials

Credentials that are stored in clear text can be intercepted by a malicious actor.