In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium Embedded Framework (CEF) --gpu-launcher argument. This is fixed in 3.1.9.
References
| Link | Resource |
|---|---|
| https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-windows-client.html#windows-release-notes | Vendor Advisory |
| https://rhinosecuritylabs.com/aws/cve-2021-38112-aws-workspaces-rce/ | Exploit Third Party Advisory |
Configurations
History
30 Sep 2021, 16:34
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-windows-client.html#windows-release-notes - Vendor Advisory | |
| References | (MISC) https://rhinosecuritylabs.com/aws/cve-2021-38112-aws-workspaces-rce/ - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:amazon:aws_workspaces:*:*:*:*:*:windows:*:* | |
| CVSS |
v2 : v3 : |
v2 : 9.3
v3 : 8.8 |
| CWE | CWE-88 |
30 Sep 2021, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium Embedded Framework (CEF) --gpu-launcher argument. This is fixed in 3.1.9. |
22 Sep 2021, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-09-22 02:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-38112
Mitre link : CVE-2021-38112
CVE.ORG link : CVE-2021-38112
JSON object : View
Products Affected
amazon
- aws_workspaces
CWE
CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')