CVE-2024-28829CWE-272CWE-807

Privilege escalation in mk_informix plugin

Medium · published August 20, 2024

CVSS v4.0
5.2
EPSS
0%
Percentile
7.0
In the wild
Unconfirmed
What it is

Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0p12, 2.2.0p32, 2.1.0p47 and 2.0.0 (EOL) allows local users to escalate privileges.

The record
Technical detail
CVSS v4.0
5.2 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H
EPSS
0.00178 · 7.0th percentile
Weaknesses
CWE-272 · Least Privilege Violation; CWE-807 · Reliance on Untrusted Inputs in a Security Decision
Published
2024-08-20T09:29Z
EPSS history
Timeline
  • 20 AUG 09:29Z
    Privilege escalation in mk_informix plugin
    cvelistv5