Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-43440

Privilege escalation via manipulated unixcat executable

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Tribe29

Description

Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29 on a Checkmk server allows the site user to escalate privileges via a manipulated unixcat executable

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tribe29 Checkmk

Default version status: unaffected

  • 2.1.0 to < 2.1.0p1affected
  • 2.0.0 to < 2.0.0p25affected
  • 1.6.0 to < 1.6.0p29affected

References