Checkmk: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 8.8
  CVE-2024-28827

  Privilege escalation in Windows agent

  Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) allows a local attacker to gain SYSTEM privileges.

  Checkmk Checkmk check-mk Ubuntu
  Jul 10, 2024
• High 8.8
  CVE-2024-28828

  1-Click compromize via CSRF

  Cross-Site request forgery in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) could lead to 1-click compromize of the site.

  Checkmk Checkmk check-mk Ubuntu
  Jul 10, 2024

Revision history

1. 2024-07-10 #1

   Initiale Fassung

References

• Checkmk Werk #17090 vom 2024-07-10
  https://checkmk.com/werk/17090
• Checkmk Werk #16845 vom 2024-07-10
  https://checkmk.com/werk/16845
• Tenable Advisory vom 2024-07-10
  https://www.tenable.com/cve/CVE-2024-28827
• Tenable Advisory vom 2024-07-10
  https://www.tenable.com/cve/CVE-2024-28828