Lucene search

[email protected]CVE-2023-6740

HistoryJan 12, 2024 - 8:15 a.m.

CVE-2023-6740

2024-01-1208:15:43

CWE-269

CWE-427

[email protected]

web.nvd.nist.gov

cve-2023-6740

privilege escalation

checkmk

jar signature

local user

security vulnerability

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges

CPENameOperatorVersion
tribe29:checkmktribe29 checkmkle2.0.0
tribe29:checkmktribe29 checkmkeq2.0.0
tribe29:checkmktribe29 checkmkeq1.6.0
tribe29:checkmktribe29 checkmkeq1.5.0
tribe29:checkmktribe29 checkmkeq1.2.5
tribe29:checkmktribe29 checkmkeq1.2.7
tribe29:checkmktribe29 checkmkeq1.6.0p10
tribe29:checkmktribe29 checkmkeq1.4.0
tribe29:checkmktribe29 checkmkeq1.6.0p13
tribe29:checkmktribe29 checkmkeq1.2.3

CPE	Name	Operator	Version
tribe29:checkmk	tribe29 checkmk	le	2.0.0
tribe29:checkmk	tribe29 checkmk	eq	2.0.0
tribe29:checkmk	tribe29 checkmk	eq	1.6.0
tribe29:checkmk	tribe29 checkmk	eq	1.5.0
tribe29:checkmk	tribe29 checkmk	eq	1.2.5
tribe29:checkmk	tribe29 checkmk	eq	1.2.7
tribe29:checkmk	tribe29 checkmk	eq	1.6.0p10
tribe29:checkmk	tribe29 checkmk	eq	1.4.0
tribe29:checkmk	tribe29 checkmk	eq	1.6.0p13
tribe29:checkmk	tribe29 checkmk	eq	1.2.3

Rows per page:

1-10 of 241

References

checkmk.com/werk/16163

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2023-6740

ubuntucve1 prion1 cvelist1 osv1 openvas1