PT-2023-28961 · Buildkit · Buildkite Elastic Ci For Aws

Published 2023-12-22 · Updated 2024-06-28 · CVE-2023-43741

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Buildkite Elastic CI for AWS versions prior to 6.7.1 Buildkite Elastic CI for AWS version 5.22.5

Description A time-of-check-time-of-use race condition issue allows the buildkite-agent user to bypass a symbolic link check for the PIPELINE PATH variable in the fix-buildkite-agent-builds-permissions script.

Recommendations For versions prior to 6.7.1, update to version 6.7.1 or later. For version 5.22.5, update to a version later than 5.22.5. As a temporary workaround, consider restricting access to the fix-buildkite-agent-builds-permissions script until a patch is available. Avoid using the PIPELINE PATH variable in the affected script until the issue is resolved.

Exploit

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2023-43741

GHSA-R5HG-349Q-MG2Q

GO-2024-2440

Affected Products

Buildkite Elastic Ci For Aws

References · 9

• 🔥 https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0003.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-43741 · Security Note
• https://osv.dev/vulnerability/CVE-2023-43741 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r5hg-349q-mg2q · Vendor Advisory
• https://osv.dev/vulnerability/GO-2024-2440 · Vendor Advisory
• https://github.com/buildkite/elastic-ci-stack-for-aws · Note
• https://github.com/buildkite/elastic-ci-stack-for-aws/commit/edad0b158ea10a6647bb1c84629d93f5c3d8770e · Note
• https://t.me/cvenotify/65998 · Telegram Post
• https://github.com/advisories/GHSA-r5hg-349q-mg2q · Note