CVE-2023-6735

Summary

Privilege escalation in mk_tsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges

Affected Software

VendorProductVersion RangeStatus
Checkmk GmbHCheckmk2.2.0 < 2.2.0p18affected
Checkmk GmbHCheckmk2.1.0 < 2.1.0p38affected
Checkmk GmbHCheckmk2.0.0 <= 2.0.0p39affected

Weaknesses

  • CWE-95: CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References