Description
Robotmk before 2.0.1 allows a local user to escalate privileges (e.g., to SYSTEM) if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment.
Advisories 1
- WID-SEC-2024-1453 Checkmk: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Jul 4, 2024