CVE-2023-41900 vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter...

CVE-2023-40167 vulnerabilities

Vulnerabilities for packages: druid, cassandra-reaper, cloudwatch-exporter...

CVE-2023-40167 vulnerabilities

Vulnerabilities for packages: druid, cassandra-reaper, cloudwatch-exporter, spark...

CVE-2023-36479 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, apache-hop, cassandra-reaper, cloudwatch-exporter...

CVE-2023-36479 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, cloudwatch-exporter...

GHSA-PWH8-58VV-VW48 vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter...

GHSA-PWH8-58VV-VW48 vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter...

GHSA-HMR7-M48G-48F6 vulnerabilities

Vulnerabilities for packages: druid, cassandra-reaper, cloudwatch-exporter...

GHSA-HMR7-M48G-48F6 vulnerabilities

Vulnerabilities for packages: druid, cassandra-reaper, cloudwatch-exporter, spark...

GHSA-3GH6-V5V9-6V9J vulnerabilities

Vulnerabilities for packages: apache-hop-fips, apache-hop, cassandra-reaper, cloudwatch-exporter...

GHSA-3GH6-V5V9-6V9J vulnerabilities

Vulnerabilities for packages: cassandra-reaper, cloudwatch-exporter...

Medium: amazon-cloudwatch-agent

Issue Overview: 2023-10-11: The severity level was changed from Important to Medium. Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to = 8192...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2023-307)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-307 advisory. 2023-10-11: The severity level was changed from Important to Medium. Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fi...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2023-2209)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300026.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2209 advisory. 2023-10-11: The severity level was changed from Important to Medium. Extremely large RSA keys in certificate...

Medium: amazon-cloudwatch-agent

Issue Overview: 2023-10-11: The severity level was changed from Important to Medium. Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to = 8192...

CVE-2023-34462 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, cloudwatch-exporter...

CVE-2023-34462 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, cloudwatch-exporter...

GHSA-6MJQ-H674-J845 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, cloudwatch-exporter...

GHSA-6MJQ-H674-J845 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, cloudwatch-exporter...

Privilege Escalation

github.com/aws/amazon-cloudwatch-agent is vulnerable to privilege escalation. The vulnerability exists when a user triggers a repair of the Agent which results in a pop-up window opening with SYSTEM permissions on Windows, allowing an attacker with administrative access to create a new command...