CVE-2023-6740

HIGH

Checkmk < 2.2.0p18, 2.1.0p38, 2.0.0p39 - Privilege Escalation via jar_signature Agent Plugin

Title source: llm
STIX 2.1

Description

Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges

References (1)

Core 1
Core References
Patch, Vendor Advisory
https://checkmk.com/werk/16163

Scores

CVSS v3 8.8
EPSS 0.0018
EPSS Percentile 7.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-269 CWE-427
Status published
Products (2)
checkmk/checkmk 2.0.0 b1 (47 CPE variants)
checkmk/checkmk 2.1.0 (3 CPE variants)
Published Jan 12, 2024
Tracked Since Feb 18, 2026