CVE-2021-37942 – APM Java Agent Local Privilege Escalation

https://notcve.org/view.php?id=CVE-2021-37942

22 Nov 2023 — A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious plugin to an application running the APM Java agent. By using this vulnerability, an attacker could execute code at a potentially higher level of permissions than their user typically has access to. Se encontró un problema de escalada de privilegios local con APM Java Agent, donde un usuario del sistema podía adjuntar un complemento malicioso a una aplicación que ejecutaba APM Java Agent... • https://discuss.elastic.co/t/apm-java-agent-security-update/291355 • CWE-269: Improper Privilege Management •