Privilege escalation : Checkmk < 2.2.0p24, 2.3.x < 2.3.0b1, 2.4.x < 2.4.0b1 Privilege Escalation Vulnerability

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.126709

Category: Privilege escalation

Title: Checkmk < 2.2.0p24, 2.3.x < 2.3.0b1, 2.4.x < 2.4.0b1 Privilege Escalation Vulnerability

Summary: Checkmk is prone to a privilege escalation vulnerability.

Description: Summary:
Checkmk is prone to a privilege escalation vulnerability.

Vulnerability Insight:
Checkmk allows to privilege escalation if the Kaspersky
Anti-Virus plugin (which is run by root user) is running executables which can be changed by less
privileged users.

Affected Software/OS:
Checkmk versions prior to 2.2.0p24, 2.3.x prior to 2.3.0b1 and
2.4.x prior to 2.4.0b1.

Solution:
Update to version 2.2.0p24, 2.3.0b1, 2.4.0b1 or
later.

CVSS Score:
6.8

CVSS Vector:
AV:L/AC:L/Au:S/C:C/I:C/A:C

Copyright Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.126709
Category:	Privilege escalation
Title:	Checkmk < 2.2.0p24, 2.3.x < 2.3.0b1, 2.4.x < 2.4.0b1 Privilege Escalation Vulnerability
Summary:	Checkmk is prone to a privilege escalation vulnerability.
Description:	Summary: Checkmk is prone to a privilege escalation vulnerability. Vulnerability Insight: Checkmk allows to privilege escalation if the Kaspersky Anti-Virus plugin (which is run by root user) is running executables which can be changed by less privileged users. Affected Software/OS: Checkmk versions prior to 2.2.0p24, 2.3.x prior to 2.3.0b1 and 2.4.x prior to 2.4.0b1. Solution: Update to version 2.2.0p24, 2.3.0b1, 2.4.0b1 or later. CVSS Score: 6.8 CVSS Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C
Copyright	Copyright (C) 2024 Greenbone AG