NetSight
high8.2

CVE-2022-31258

In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.

Impact

In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.

Affected products

VendorProductAffected versions
CheckmkCheckmk
before 1.6.0
Versions 1.6.0, 2.0.0, 2.1.0
Tribe29Checkmk
Versions 1.6.0b10, 1.6.0b11, 1.6.0p10, 1.6.0p11, 1.6.0p12, 1.6.0p13

Weakness classification

References