CVE-2023-6735CWE-95

Privilege escalation in mk_tsm

High · published January 12, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
19.3
In the wild
Unconfirmed
What it is

Privilege escalation in mk_tsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00279 · 19.3th percentile
Weakness
CWE-95 · Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
Published
2024-01-12T07:50Z
EPSS history
Timeline
  • 12 JAN 07:50Z
    Privilege escalation in mk_tsm
    cvelistv5