Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Buildkite Elastic CI for AWS: Unauthorized directory ownership change

CVE-2023-43116 · published 2 years ago
Summary

The Buildkite Elastic CI for AWS software has a security issue that could allow an unauthorized user to change the ownership of any directory on the system. This could lead to unintended access to sensitive data or files. To fix this issue, update to version 6.7.1 or 5.22.5 or later.

What to do
  • Update github.com buildkite to version 6.7.0.
Affected software
Ecosystem VendorProductAffected versions
go github.com buildkite < 6.7.0
Fix: upgrade to 6.7.0
– buildkite elastic_ci_stack < 5.22.5
>= 6.0.0, < 6.7.1
cpe:2.3:a:buildkite:elastic_ci_stack:*:*:*:*:*:aws:*:*
Original advisory text
A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to change ownership of arbitrary directories via the PIPEL...
A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to change ownership of arbitrary directories via the PIPELINE_PATH variable in the fix-buildkite-agent-builds-permissions script.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-59Link Following
Timeline
Published22 Dec 2023
Updated31 Oct 2026
First seen6 Mar 2026
Sources
GHSA-7c44-7j7v-w554 · GHSA
CVE-2023-43116 · NVD
CVE-2023-43116 · OSV
Track software like this
Free during beta