← Database

CVE-2022-29527

HIGH CVSS: 7.0 Published: 2022-04-20 Modified: 2026-06-17

Description

Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.

Affected Platforms

Amazon Amazon Ssm Agent

Weakness Type

CWE-362, CWE-732

References