Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2021-38112

Description

In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium Embedded Framework (CEF) --gpu-launcher argument. This is fixed in 3.1.9.

POC

Reference

- https://rhinosecuritylabs.com/aws/cve-2021-38112-aws-workspaces-rce/

Github

- https://github.com/ARPSyndicate/cve-scores

- https://github.com/ARPSyndicate/cvemon

- https://github.com/CyberSecurityUP/Cloud-Security-Attacks

- https://github.com/H4cksploit/CVEs-master

- https://github.com/Jaikumar3/Cloud-Security-Attacks

- https://github.com/Mehedi-Babu/security_attacks_cloud

- https://github.com/RhinoSecurityLabs/CVEs

- https://github.com/SamXl-Codes/Cloud-Security-Library

- https://github.com/SummitRoute/csp_security_mistakes

- https://github.com/merlinepedra/RHINOECURITY-CVEs

- https://github.com/merlinepedra25/RHINOSECURITY-CVEs

- https://github.com/satishgattu/Cloud-Security-Attacks