CVE-2023-43741

Summary

CVE-2023-43741 is a race condition vulnerability affecting Buildkite Elastic CI for AWS before versions 6.7.1 and 5.22.5. The issue lies in the "fix-buildkite-agent-builds-permissions" script where the PIPELINE_PATH variable is checked. An attacker can exploit this time-of-check-time-of-use vulnerability to bypass the symbolic link check and gain unauthorized access to build processes as the buildkite-agent user.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.