The Amazon Web Services (AWS) CloudFormation bootstrap tools package (aka aws-cfn-bootstrap) before 1.4-19.10 allows local users to execute arbitrary code with root privileges by leveraging the ability to create files in an unspecified directory.
Weakness
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Amazon_web_services_cloudformation_bootstrap | Amazon | * | 1.4-19.10 (excluding) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/122.html
- https://cwe.mitre.org/data/definitions/233.html
- https://cwe.mitre.org/data/definitions/58.html
References
- http://www.securityfocus.com/bid/99972
- https://alas.aws.amazon.com/ALAS-2017-861.html
- https://sintonen.fi/advisories/aws-cfn-bootstrap-local-code-execution-as-root.txt
- http://www.securityfocus.com/bid/99972
- https://alas.aws.amazon.com/ALAS-2017-861.html
- https://sintonen.fi/advisories/aws-cfn-bootstrap-local-code-execution-as-root.txt