CVE-2023-6740CWE-427

Privilege escalation in jar_signature

High · published January 12, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00180 · 7.2th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2024-01-12T07:50Z
EPSS history
Timeline
  • 12 JAN 07:50Z
    Privilege escalation in jar_signature
    cvelistv5