Amazon Ssm Agent vulnerabilities

1 vulnerability

Known vulnerabilities in Amazon Ssm Agent, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7CVE-2022-29527amazonamazon_ssm_agent+8
EPSS score
0.30%
Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.