CVE-2022-29527

Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges…

published April 20, 2022

CVSS
—
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.6th percentile
Published
2022-04-20T09:09Z
EPSS history
Timeline
  • 20 APR 09:09Z
    Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges…
    cvelistv5