Elastic Ci Stack

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:buildkite:elastic_ci_stack:*:*:*:*:*:aws:*:*

part: a version: * update: *

VendorBuildkite (3ab00957-5bef-5e61-ab0b-4b2c5c4480b5)
ProductElastic Ci Stack (148a16db-7918-53a8-800b-33af70f439dd)
Edition*
Language*
Software edition*
Target softwareaws
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-43741 vulnerable 2026-06-08 06:12:37.742697 Details available
A time-of-check-time-of-use race condition vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to bypass a symbolic link check for the PIPELINE_PATH variable in the fix-buildkite-agent-builds-permissions script.
Published: 2023-12-22T00:00:00.000Z
Updated: 2024-08-27T20:14:11.119Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43116 vulnerable 2026-06-08 06:11:10.935706 Details available
A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to change ownership of arbitrary directories via the PIPELINE_PATH variable in the fix-buildkite-agent-builds-permissions script.
Published: 2023-12-22T00:00:00.000Z
Updated: 2024-08-02T19:37:23.495Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.