Test ID:	1.3.6.1.4.1.25623.1.0.127686
Category:	Privilege escalation
Title:	Checkmk < 1.6.0p29, 2.0.x < 2.0.0p26, 2.1.x < 2.1.0p3 Privilege Escalation Vulnerability
Summary:	Checkmk is prone to a privilege escalation vulnerability.
Description:	Summary: Checkmk is prone to a privilege escalation vulnerability. Vulnerability Insight: Wrong file ownership of the maintainer scripts located at /var/lib/dpkg/info: they were owned by the user and group with the ID 1001 instead of root. If such a user exists on your system, they can change the content of these files which are later executed by root (during package installation, update or removal), leading to a local privilege escalation on the monitored host. Affected Software/OS: Checkmk installations done via the Debian packages, versions prior to 1.6.0p29, 2.0.x prior to 2.0.0p26 and 2.1.x prior to 2.1.0p3. Solution: See the referenced vendor advisory for steps how to check the correct file permissions. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-33912 https://checkmk.com/werk/14098
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.