Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-31210

Privilege escalation in agent via LD_LIBRARY_PATH

Description

Usage of user controlled LD_LIBRARY_PATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Checkmk GmbH Checkmk

Default version status: unaffected

  • 2.2.0p10 to < 2.2.0p17affected

References