CVEvulnerability

CVE-2022-31258

6.7 MEDIUM Published 2022-05-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-05-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-59

Description

In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.

Affected configurations

• checkmk checkmk (< 1.6.0) • checkmk checkmk 1.6.0 • checkmk checkmk 2.0.0 • checkmk checkmk 2.1.0 • tribe29 checkmk 1.6.0b10 • tribe29 checkmk 1.6.0b11 • tribe29 checkmk 1.6.0p10 • tribe29 checkmk 1.6.0p11 • tribe29 checkmk 1.6.0p12 • tribe29 checkmk 1.6.0p13 • tribe29 checkmk 1.6.0p14 • tribe29 checkmk 1.6.0p15 • tribe29 checkmk 1.6.0p16 • tribe29 checkmk 1.6.0p17 • tribe29 checkmk 1.6.0p18

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References