| Package | Affected versions | Patched versions |
|---|---|---|
| co.elastic.apm:apm-agent-parent | ≥ 1.18.0, < 1.27.1 | 1.27.1 |
| co.elastic.apm:elastic-apm-agent | ≥ 1.18.0, < 1.27.1 | 1.27.1 |
| apm java agent | ≥ 1.18.0, ≤ 1.27.0 |
A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious plugin to an application running the APM Java agent. By using this vulnerability, an attacker could execute code at a potentially higher level of permissions than their user typically has access to.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free