EMR vulnerabilities

1 known vulnerability in EMR from Amazon. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  EMR: Storing Passwords in a Recoverable Format

  CVE-2025-8904Aug 13, 2025Amazon

  Amazon EMR Secret Agent creates a keytab file containing Kerberos credentials. This file is stored in the /tmp/ directory. A user with access to this directory and another account can potentially decrypt the keys and escalate to higher privileges. Users are ad