TROYANOSYVIRUS
Back to CVEs

CVE-2024-0670

HIGH
8.8

Description

Privilege escalation in windows agent plugin in Checkmk before 2.2.0p23, 2.1.0p40 and 2.0.0 (EOL) allows local user to escalate privileges

CVE Details

CVSS v3.1 Score8.8
SeverityHIGH
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
Published3/11/2024
Last Modified12/9/2024
Sourcenvd
Honeypot Sightings0

Affected Products

checkmk:checkmkmicrosoft:windows

Weaknesses (CWE)

CWE-427CWE-427

References

https://checkmk.com/werk/16361(security@checkmk.com)
http://seclists.org/fulldisclosure/2024/Mar/29(af854a3a-2127-422b-91ae-364da2661108)
https://checkmk.com/werk/16361(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.