CVE-2021-37941
Quick assessment
Affected
Elastic APM Java Agent
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GE APM是美国通用电气（GE）公司的一款设备监控系统。该系统可以持续性对设备运行状态和故障进行监视。 GE APM Java agent 存在安全漏洞，该漏洞源于发现 APM Java agent 存在本地权限提升问题，系统上的用户可以将恶意文件附加到使用 APM Java 代理运行的应用程序。 使用此向量，恶意或受感染的用户帐户可以使用代理以比他们拥有的权限级别更高的权限运行命令。
Possible ATT&CK Techniques 2 AI
T1055 · Process Injection T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-37941
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with the APM Java agent. Using this vector, a malicious or compromised user account could use the agent to run commands at a higher level of permissions than they possess. This vulnerability affects users that have set up the agent via the attacher cli 3, the attach API 2, as well as users that have enabled the profiling_inferred_spans_enabled option
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
特权管理不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
GE APM 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GE APM是美国通用电气（GE）公司的一款设备监控系统。该系统可以持续性对设备运行状态和故障进行监视。 GE APM Java agent 存在安全漏洞，该漏洞源于发现 APM Java agent 存在本地权限提升问题，系统上的用户可以将恶意文件附加到使用 APM Java 代理运行的应用程序。 使用此向量，恶意或受感染的用户帐户可以使用代理以比他们拥有的权限级别更高的权限运行命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Elastic | APM Java Agent | 1.10.0 through 1.26.0 | - |
|
II. Public POCs for CVE-2021-37941
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-37941
请登录查看更多情报信息。
Other References for CVE-2021-37941 (1)
-
https://discuss.elastic.co/t/apm-java-agent-security-update/289627 x_refsource_MISC
IV. Related Vulnerabilities
Same vendor: Elastic
-
CVE-2026-82302
Incorrect Authorization in Kibana Leading to Unauthorized Co -
CVE-2026-82299
Incorrect Authorization in Kibana Leading to Information Dis -
CVE-2026-82298
Incorrect Authorization in Kibana Leading to Denial of Servi -
CVE-2026-78596
Missing Authorization in Kibana Leading to Unauthorized Cros -
CVE-2026-78595
Missing Authorization in Kibana Fleet Plugin Leading to Cros
Same weakness: CWE-269
-
CVE-2026-94048
CodeAstro QR Code Attendance Management System UserControlle -
CVE-2026-94047
samanhappy MCPHub Template Import Endpoint templateService.t -
CVE-2026-86554
Email enumeration and account ID leakage vulnerabilities in -
CVE-2026-93968
aiyiyi121 SxDevOps UserSerializer serializers.py update priv -
CVE-2026-86553
A password reset vulnerability in ZTE SmartLife APP
V. Comments for CVE-2021-37941
No comments yet