Cpe:2.3:a:amazon:cicd-Toolchain-for-Serverless-Applications:1.0.8:*:*:*:*:*:*:*

An incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications (versions 1.0.7-1.0.10) allows authenticated users with repository push access to perform unauthorized privilege escalation and resource modification across an AWS account.