Low: amazon-ssm-agent

Issue Overview: No CVE associated with this advisory Affected Packages: amazon-ssm-agent Issue Correction: Run dnf update amazon-ssm-agent --releasever 2023.1.20230906 or dnf update --advisory ALAS2023-2023-339 --releasever 2023.1.20230906 to update your system. More information on how to update...

Important: amazon-ssm-agent

Issue Overview: The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server. CVE-2021-43565 A broken cryptographic algorithm flaw was found in golang.org/x/crypto/ssh. This issue causes a client to fail authentification with R...

SUSE SLES15 / openSUSE 15 Security Update : amazon-ssm-agent (SUSE-SU-2023:3537-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3537-1 advisory. - rebuild the package with the go 1.21 security release bsc1212475. Tenable has extracted the preceding description block...

SUSE-SU-2023:3537-1 Security update for amazon-ssm-agent

This update of amazon-ssm-agent fixes the following issues: - rebuild the package with the go 1.21 security release bsc1212475...

PT-2023-36257 · Amazon · Amazon-Ssm-Agent

Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security release in the go 1.21 package, which is used by the amazon-ssm-agent. The package has been rebuilt with the go 1.21 security release to address...

SUSE SLES12 Security Update : amazon-ssm-agent (SUSE-SU-2023:3501-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3501-1 advisory. - rebuild the package with the go 1.21 security release bsc1212475. Tenable has extracted the preceding description block directly from the...

SUSE-SU-2023:3501-1 Security update for amazon-ssm-agent

This update of amazon-ssm-agent fixes the following issues: - rebuild the package with the go 1.21 security release bsc1212475...

PT-2023-36251 · Amazon · Amazon-Ssm-Agent

Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security concern addressed by rebuilding the package with the go 1.21 security release. Recommendations: At the moment, there is no information about a...

Researchers Uncover AWS SSM Agent Misuse as a Covert Remote Access Trojan

Cybersecurity researchers have discovered a new post-exploitation technique in Amazon Web Services AWS that allows the AWS Systems Manager Agent SSM Agent to be run as a remote access trojan on Windows and Linux environments "The SSM agent, a legitimate tool used by admins to manage their...

SUSE SLES12 Security Update : amazon-ssm-agent (SUSE-SU-2023:2656-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2656-1 advisory. - rebuild the package with the go 1.20 security release bsc1206346. Tenable has extracted the preceding description block directly from the...

SUSE SLES15 / openSUSE 15 Security Update : amazon-ssm-agent (SUSE-SU-2023:2650-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2650-1 advisory. - rebuild the package with the go 1.20 security release bsc1206346. Tenable has extracted the preceding description block...

SUSE-SU-2023:2656-1 Security update for amazon-ssm-agent

This update of amazon-ssm-agent fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...

SUSE-SU-2023:2650-1 Security update for amazon-ssm-agent

This update of amazon-ssm-agent fixes the following issues: - rebuild the package with the go 1.20 security release bsc1206346...

PT-2023-36200 · Amazon · Amazon-Ssm-Agent

Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security release in the go 1.20 package, which is used by the amazon-ssm-agent. The package has been rebuilt with the go 1.20 security release to address...

PT-2023-36202 · Amazon · Amazon-Ssm-Agent

Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security concern addressed by rebuilding the package with the go 1.20 security release. Recommendations: At the moment, there is no information about a...

SUSE SLES15 Security Update : amazon-ssm-agent (SUSE-SU-2023:2326-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2326-2 advisory. - rebuild the package with the go 1.19 security release bsc1200441. Tenable has extracted the preceding description block directly from the...

SUSE-SU-2023:2326-2 Security update for amazon-ssm-agent

This update of amazon-ssm-agent fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441...

PT-2023-36191 · Amazon · Amazon-Ssm-Agent

Name of the Vulnerable Software and Affected Versions: amazon-ssm-agent affected versions not specified Description: The issue is related to a security concern addressed by rebuilding the package with the go 1.19 security release. Recommendations: At the moment, there is no information about a...

Command Shell, Bind SSM (via AWS API)

Creates an interactive shell using AWS SSM Module Options msf use payload/generic/shellbindawsssm msf payloadshellbindawsssm show actions ...actions... msf payloadshellbindawsssm set ACTION msf payloadshellbindawsssm show options ...show and set options... msf payloadshellbindawsssm run This modu...

Amazon Web Services EC2 SSM enumeration

Provided AWS credentials, this module will call the authenticated API of Amazon Web Services to list all SSM-enabled EC2 instances accessible to the account. Once enumerated as SSM-enabled, the instances can be controlled using out-of-band WebSocket sessions provided by the AWS API nominally,...