Skip to content
OpenAdvisories
High · 8.8 CVE-2023-22294 EUVD-2023-26458GHSA-65m5-hmp6-qgjx

Privilege escalation in Checkmk Appliance

Published Apr 18, 2023 · Updated Feb 5, 2025 · Assigned by Tribe29

Description

Privilege escalation in Tribe29 Checkmk Appliance before 1.6.4 allows authenticated site users to escalate privileges via incorrectly set permissions.

Affected products

VendorProductAffectedFixed
Tribe29 Checkmk Appliance < 1.6.4 1.6.4

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS check-mk No fix yet —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS check-mk No fix yet —

References