Vulnerability · Published Dec 13, 2023 · Assigned by Checkmk
CVE-2023-31210Privilege escalation in agent via LD_LIBRARY_PATH
High 8.8
In plain English
A high-severity uncontrolled search path in Checkmk from Checkmk GmbH. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.5%top 54.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Usage of user controlled LD_LIBRARY_PATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Checkmk GmbH | Checkmk | 2.2.0p10 – before 2.2.0p17 |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H