Privilege Escalation

github.com/aws/amazon-cloudwatch-agent is vulnerable to privilege escalation. The vulnerability exists when a user triggers a repair of the Agent which results in a pop-up window opening with SYSTEM permissions on Windows, allowing an attacker with administrative access to create a new command...

Amazon CloudWatch Agent for Windows has Privilege Escalation Vector

Impact A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM permissions. Users with administrative access to affected hosts may use this to create a...

GHSA-J8X2-2M5W-J939 Amazon CloudWatch Agent for Windows has Privilege Escalation Vector

Impact A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM permissions. Users with administrative access to affected hosts may use this to create a...

CVE-2022-23511

A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM...

Privilege escalation

A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM...

PT-2022-16042 · Amazon · Amazon Cloudwatch Agent For Windows

Name of the Vulnerable Software and Affected Versions: Amazon CloudWatch Agent for Windows versions up to and including v1.247354 Description: A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows. When users trigger a repair of the Agent, a pop-up window opens with...

CVE-2022-23511

CVE-2022-23511 concerns the Windows CloudWatch Agent (Amazon) prior to version 1.247355. The issue is a privilege escalation: when an affected user with admin access triggers the Agent repair, a pop‑up runs with SYSTEM permissions, allowing creation of an NT AUTHORITY\SYSTEM command prompt. The v...

CVE-2022-23511

A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM...

CVE-2022-23511

A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM...

Amazon CloudWatch Agent 安全漏洞

Amazon CloudWatch Agent is a package agent from Amazon.com, Inc. that runs autonomously and continuously on your server. A security vulnerability exists in Amazon CloudWatch Agent version 1.247354 and earlier, which stems from a privilege escalation issue that opens a pop-up window with SYSTEM...

CVE-2022-23511

A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM...

openSUSE: Security Advisory for Recommended (SUSE-SU-2022:2831-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:2831-1 Recommended update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures, python-coverage, python-oniconfig, python-unittest-mixins

This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 bsc1196696, bsc1195916, jscSLE-23972 - Remove redundant python3 dependency from Requires - Update regular expression t...

Malicious code in charon-relay-cloudwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03dd1a4e0145aaba748283bea1a111e18640047994124b1be721752b87139697 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1881 Malicious code in charon-relay-cloudwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03dd1a4e0145aaba748283bea1a111e18640047994124b1be721752b87139697 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AWS-Threat-Simulation-and-Detection - Playing Around With Stratus Red Team (Cloud Attack Simulation Tool) And SumoLogic

This repository is a documentation of my adventures with Stratus Red Team - a tool for adversary emulation for the cloud. Stratus Red Team is "Atomic Red Team for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained manner. We run the attacks covered in the...

Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials in plain text

Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials unencrypted in its global configuration file jenkins.plugins.awslogspublisher.AWSLogsConfig.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...

GHSA-M34R-F7H6-C3J2 Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials in plain text

Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials unencrypted in its global configuration file jenkins.plugins.awslogspublisher.AWSLogsConfig.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...

Automated remediation level 3: Governance and hygiene

Mold it, make it, just don’t fake it At a quick glance, it seems like the title of this blog is “government hygiene.” Most likely, that wouldn’t be a particularly exciting read, but we’re hoping you might be engaged enough to gain a few takeaways from this fourth piece in our series on automating...

DAGOBAH - Open Source Tool To Generate Internal Threat Intelligence, Inventory & Compliance Data From AWS Resources

Dagobah is an open source tool written in python to automate the internal threat intelligence generation, inventory collection and compliance check from different AWS resources. Dagobah collects information and save the state into an elasticsearch index. Dagobah runs into the a LAMBDA and looks a...