—
GO-2022-1160
Amazon CloudWatch Agent for Windows has Privilege Escalation Vector in github.com/aws/amazon-cloudwatch-agent
Quick fix
GO-2022-1160 — github.com/aws/amazon-cloudwatch-agent: upgrade to the fixed version with the command below.
go get github.com/aws/amazon-cloudwatch-agent@v1.247355.0Details
Amazon CloudWatch Agent for Windows has Privilege Escalation Vector in github.com/aws/amazon-cloudwatch-agent
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/aws/amazon-cloudwatch-agent
Introduced in:
0Fixed in: 1.247355.0Fix
go get github.com/aws/amazon-cloudwatch-agent@v1.247355.0References
- https://github.com/aws/amazon-cloudwatch-agent/security/advisories/GHSA-j8x2-2m5w-j939[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2022-23511[ADVISORY]
- https://github.com/aws/amazon-cloudwatch-agent/commit/6119858864c317ff26f41f576c169148d1250837[FIX]
- https://github.com/aws/amazon-cloudwatch-agent/commit/6119858864c317ff26f41f576c169148d1250837#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52[FIX]