CVE-2022-31258

In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink

High · published May 20, 2022

CVSS v3.1
8.2
EPSS
0%
Percentile
33.4
In the wild
Unconfirmed
What it is

In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00405 · 33.4th percentile
Published
2022-05-20T22:02Z
EPSS history
Timeline
  • 20 MAY 22:02Z
    In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink
    cvelistv5