Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS1yNTYyLW04NjItNjN3M80aGg
APM Java Agent Local Privilege Escalation
A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with the APM Java agent. Using this vector, a malicious or compromised user account could use the agent to run commands at a higher level of permissions than they possess. This vulnerability affects users that have set up the agent via the attacher cli 3, the attach API 2, as well as users that have enabled the profiling_inferred_spans_enabled option
Permalink: https://github.com/advisories/GHSA-r562-m862-63w3JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yNTYyLW04NjItNjN3M80aGg
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 2 years ago
Updated: 25 days ago
CVSS Score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Identifiers: GHSA-r562-m862-63w3, CVE-2021-37941
References:
- https://nvd.nist.gov/vuln/detail/CVE-2021-37941
- https://discuss.elastic.co/t/apm-java-agent-security-update/289627
- https://github.com/advisories/GHSA-r562-m862-63w3
Affected Packages
pypi:elastic-apm
Dependent packages: 20Dependent repositories: 512
Downloads: 958,955 last month
Affected Version Ranges: >= 1.10.0, < 1.27.0
Fixed in: 1.27.0
All affected versions:
All unaffected versions: 1.0.0, 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.1.0, 4.2.0, 4.2.1, 4.2.2, 5.0.0, 5.1.0, 5.1.1, 5.1.2, 5.2.0, 5.2.1, 5.2.2, 5.2.3, 5.3.0, 5.3.1, 5.3.2, 5.3.3, 5.4.0, 5.4.1, 5.4.2, 5.4.3, 5.5.0, 5.5.1, 5.5.2, 5.6.0, 5.7.0, 5.8.0, 5.8.1, 5.9.0, 5.10.0, 5.10.1, 6.0.0, 6.1.0, 6.1.1, 6.1.2, 6.1.3, 6.2.0, 6.2.1, 6.2.2, 6.2.3, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.4.0, 6.5.0, 6.6.0, 6.6.1, 6.6.2, 6.6.3, 6.7.0, 6.7.1, 6.7.2, 6.8.0, 6.8.1, 6.9.0, 6.9.1, 6.10.0, 6.10.1, 6.10.2, 6.11.0, 6.12.0, 6.13.0, 6.13.1, 6.13.2, 6.14.0, 6.15.0, 6.15.1, 6.16.0, 6.16.1, 6.16.2, 6.17.0, 6.18.0, 6.19.0, 6.20.0, 6.21.1, 6.21.3, 6.22.0