APM Java Agent Local Privilege Escalation issue
Date: 2023-11
Affected: maven/co.elastic.apm:elastic-apm-agent, maven/co.elastic.apm:apm-agent-parent
Attack vector: other
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2014-6439
CVE-2018-17247
CVE-2018-3823
CVE-2018-3824
CVE-2019-7611
CVE-2019-7615
CVE-2019-7617
CVE-2021-22143
CVE-2021-37942
CWE: CWE-20
CWE-200
CWE-269
CWE-284
CWE-295
CWE-532
CWE-611
CWE-79
CVSS: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious plugin to an application running the APM Java agent. By using this vulnerability, an attacker could execute code at a potentially higher level of permissions than their user typically has access to.


Mitigations:

Architectural layers (MAESTRO):