1766 matches found
PT-2024-15070 · Checkmk · Checkmk
Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.2.0p18 Checkmk versions prior to 2.1.0p38 Checkmk versions prior to 2.0.0p39 Description: The issue allows a local user to escalate privileges due to a problem in the jar signature agent plugin. Recommendations: Fo...
CVE-2023-31211: Incorrect Implementation of Authentication Algorithm
Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials...
Checkmk Security Vulnerabilities
Checkmk is an editor. A security vulnerability exists in Checkmk versions 2.2.0p18, 2.1.0p38, and 2.0.0p39. An attacker can escalate privileges by exploiting this vulnerability...
Checkmk Security Vulnerabilities
Checkmk is an editor. A security vulnerability exists in Checkmk versions 2.2.0p18, 2.1.0p38, and 2.0.0p39. An attacker can escalate privileges by exploiting this vulnerability...
CVE-2023-6740
Privilege escalation in jarsignature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges...
Checkmk 2.2.0p10 < 2.2.0p17 Privilege Escalation Vulnerability
Checkmk is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:checkmk:checkmk"; if...
CVE-2023-31210
Usage of user controlled LDLIBRARYPATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries...
CVE-2023-31210
Usage of user controlled LDLIBRARYPATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries...
Design/Logic Flaw
Usage of user controlled LDLIBRARYPATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries...
UBUNTU-CVE-2023-31210
Usage of user controlled LDLIBRARYPATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries...
CVE-2023-31210 Privilege escalation in agent via LD_LIBRARY_PATH
Usage of user controlled LDLIBRARYPATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries...
CVE-2023-31210
CVE-2023-31210 affects Checkmk 2.2.0p10 to 2.2.0p16, where a user-controlled LD_LIBRARY_PATH in the agent can be exploited by a malicious Checkmk site user to escalate privileges via injection of malicious libraries. The documents confirm the affected product (Checkmk), the vulnerable component (...
CVE-2023-31210 Privilege escalation in agent via LD_LIBRARY_PATH
Usage of user controlled LDLIBRARYPATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries...
CVE-2023-31210 Privilege escalation in agent via LD_LIBRARY_PATH
Usage of user controlled LDLIBRARYPATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries...
PT-2023-23233 · Checkmk · Checkmk
Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.2.0p10 through 2.2.0p16 Description: The issue concerns the usage of user-controlled LD LIBRARY PATH in the agent of Checkmk, allowing a malicious Checkmk site user to escalate rights via the injection of malicious librarie...
Checkmk Security Vulnerabilities
Checkmk is an editor. A security vulnerability exists in Checkmk versions 2.2.0p10 through 2.2.0p16, which stems from the use of user-controlled LDLIBRARYPATH in an agent, allowing an attacker to escalate privileges by injecting a malicious library...
CVE-2023-31210: Uncontrolled Search Path Element
Usage of user controlled LDLIBRARYPATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries...
CVE-2023-6287
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files...