CVE-2023-22294CWE-732

Privilege escalation in Checkmk Appliance

High · published April 18, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
52.0
In the wild
Unconfirmed
What it is

Privilege escalation in Tribe29 Checkmk Appliance before 1.6.4 allows authenticated site users to escalate privileges via incorrectly set permissions.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00683 · 52.0th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2023-04-18T18:59Z
EPSS history
Timeline
  • 18 APR 18:59Z
    Privilege escalation in Checkmk Appliance
    cvelistv5