CVE-2022-31258

high-risk
Published 2022-05-20

In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.

Do I need to act?

-
0.04% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.2/10 High
LOCAL / LOW complexity

Affected Products (20)

Affected Vendors

Checkmk Tribe29

References (4)

Vendor Advisory https://checkmk.com/werk/13902
Release Notes https://forum.checkmk.com/c/announcements/18
Vendor Advisory https://checkmk.com/werk/13902
Release Notes https://forum.checkmk.com/c/announcements/18
54
/ 100
high-risk
Severity 25/34 · High
Exploitability 0/34 · Minimal
Exposure 29/34 · Critical