high

AWS SSM agent local privilege escalation

Published Wed, Apr 20th, 2022
Platforms

Summary

The Amazon SSM Agent (used for managing EC2 instances via Amazon Systems Manager) created a world-writable sudoers file, which would have allowed local attackers to inject Sudo rules and escalate privileges to root. This could occur in certain situations involving a race condition.

Affected Services

SSM, EC2

Remediation

Update the agent to the patched version (3.1.1208)

Tracked CVEs

CVE-2022-29527

References

Contributed by https://github.com/mer-b
Entry Status
Finalized
Disclosure Date
Mon, Feb 28th, 2022
Exploitablity Period
until 2022/04/05
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Matthias Gerstner, SUSE

More vulnerabilities...

high

Log4Shell Hot Patch Vulnerable to Container Escape and Privilege Escalation

AWS's hotpatches for Log4shell worked as intended but introduced new container escape vulnerabilities.

...
Yuval Avrahami, Palo Alto

low

Privilege Escalation to SYSTEM in AWS VPN Client

The AWS VPN Client application is affected by an arbitrary file write as SYSTEM, which can lead to privilege escalation and an information disclosure vulnerability that allows the user's Net-NTLMv2...

...
David Yesland, Rhino Security

high

AWS RDS local file read

A vulnerability was discovered in the Aurora PostgreSQL log_fdw extension for Amazon Relational Database Service (RDS), allowing an attacker to read files on the EC2 host and obtain credentials for...

...
Gafnit Amiga, Lightspin

View all