CVEvulnerability

CVE-2022-29527

7.0 HIGH Published 2022-04-20 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2022-04-20
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses: CWE-362, CWE-732

Description

Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.

Affected configurations

• amazon amazon ssm agent (< 3.1.1208.0)

Weakness · CWE (2)

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
CWE-732 Incorrect Permission Assignment for Critical Resource weakness

Referenced by CWE · observed example (2)

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References

https://bugzilla.suse.com/show_bug.cgi?id=1196556 Exploit, Issue Tracking, Third Party Advisory
https://github.com/aws/amazon-ssm-agent/commit/0fe8ae99b2ff25649c7b86d3bc05fc037400aca7 Patch, Third Party Advisory
https://github.com/aws/amazon-ssm-agent/releases/tag/3.1.1208.0 Patch, Release Notes, Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1196556 Exploit, Issue Tracking, Third Party Advisory
https://github.com/aws/amazon-ssm-agent/commit/0fe8ae99b2ff25649c7b86d3bc05fc037400aca7 Patch, Third Party Advisory
https://github.com/aws/amazon-ssm-agent/releases/tag/3.1.1208.0 Patch, Release Notes, Third Party Advisory