Description
Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0p12, 2.2.0p32, 2.1.0p47 and 2.0.0 (EOL) allows local users to escalate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Checkmk | Checkmk | 2.3.0 – < 2.3.0p12, 2.2.0 – < 2.2.0p32, 2.1.0 – < 2.1.0p47, 2.0.0 – ≤ 2.0.0p39 | 2.3.0p12 |
Advisories 1
- WID-SEC-2024-1757 Checkmk: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Aug 4, 2024