PT-2023-28961 · Buildkit · Buildkite Elastic Ci For Aws

Publicado 2023-12-22 · Atualizado 2024-06-28 · CVE-2023-43741

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Buildkite Elastic CI for AWS versions prior to 6.7.1 Buildkite Elastic CI for AWS version 5.22.5

Description A time-of-check-time-of-use race condition issue allows the buildkite-agent user to bypass a symbolic link check for the PIPELINE PATH variable in the fix-buildkite-agent-builds-permissions script.

Recommendations For versions prior to 6.7.1, update to version 6.7.1 or later. For version 5.22.5, update to a version later than 5.22.5. As a temporary workaround, consider restricting access to the fix-buildkite-agent-builds-permissions script until a patch is available. Avoid using the PIPELINE PATH variable in the affected script until the issue is resolved.

Exploit

Correção

Time Of Check To Time Of Use

Enumeração de Fraquezas

CWE-367

Identificadores relacionados

CVE-2023-43741

GHSA-R5HG-349Q-MG2Q

GO-2024-2440

Produtos afetados

Buildkite Elastic Ci For Aws

Referências · 9

• 🔥 https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0003.md · Exploit
• https://github.com/buildkite/elastic-ci-stack-for-aws · Nota
• https://github.com/buildkite/elastic-ci-stack-for-aws/commit/edad0b158ea10a6647bb1c84629d93f5c3d8770e · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-43741 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-43741 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-r5hg-349q-mg2q · Aviso do Fabricante
• https://osv.dev/vulnerability/GO-2024-2440 · Aviso do Fabricante
• https://t.me/cvenotify/65998 · Publicação no Telegram
• https://github.com/advisories/GHSA-r5hg-349q-mg2q · Nota