aws/amazon-ssm-agent

aws/amazon-ssm-agent

GitHubGitHub
GitHubgithub.com
aws.amazon.comaws.amazon.com
Releases210
Frequency2 weeks 3 days
Last Release
Stars1.15K
An agent to enable remote management of your EC2 instances, on-premises servers, or virtual machines (VMs).
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-29527↗
7 HIGH6.9 MEDIUM

Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.