Test ID:	1.3.6.1.4.1.25623.1.0.126708
Category:	Privilege escalation
Title:	Checkmk < 2.1.0p40, 2.2.x < 2.2.0p23, 2.3.x < 2.3.0b1, 2.4.x < 2.4.0b1 Privilege Escalation Vulnerability
Summary:	Checkmk is prone to a privilege escalation vulnerability.
Description:	Summary: Checkmk is prone to a privilege escalation vulnerability. Vulnerability Insight: In order to execute some system commands Checkmk Windows agent writes cmd files to C:\Windows\Temp\ and afterwards executes them. The permissions of the files were set restrictive but existing files were not properly handled. If a cmd file already existed and was write protected the agent was not able to rewrite the file but did not handle this case and executed the file nevertheless. Affected Software/OS: Checkmk versions prior to 2.1.0p40, 2.2.x prior to 2.2.0p23, 2.3.x prior to 2.3.0b1 and 2.4.x prior to 2.4.0b1. Solution: Update to version 2.1.0p40, 2.2.0p23, 2.3.0b1, 2.4.0b1 or later. CVSS Score: 6.8 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-0670 http://seclists.org/fulldisclosure/2024/Mar/29 https://checkmk.com/werk/16361
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.