Qlik Replicate Meta Data Request from EC2 Should be IMDSv2 compliant

randy_tongue — Thu, 20 Jan 2022 23:03:29 GMT

Qlik Replicate Meta Data Request from EC2 are not IMDSv2 compliant. As a result instances hosting replicate are susceptible to SSRF attacks from an intruder using the curl command. Please address this serious vulnerability in your product.

Re: Qlik Replicate Meta Data Request from EC2 Should be IMDSv2 compliant - Status changed to: Closed - Declined

Nulee_Massaro — Wed, 05 Apr 2023 15:39:01 GMT

We are currently in the process of moving all ideations to a new system. In an effort to make this migration easier, we are closing older ideations that did not see a lot of activity (likes/comments). If you are still interested in this enhancement, please open a new ideation so it repopulates as "new" in our system.

Thank you. Let me know if you have any questions!

idea Qlik Replicate Meta Data Request from EC2 Should be IMDSv2 compliant in Suggest an Idea

Qlik Replicate Meta Data Request from EC2 Should be IMDSv2 compliant

Re: Qlik Replicate Meta Data Request from EC2 Should be IMDSv2 compliant - Status changed to: Closed - Declined