CVE-2023-31210 — Privilege escalation in agent via LD_LIBRARY_PATH

CVE-2023-31210

Privilege escalation in agent via LD_LIBRARY_PATH PUBLISHED

Description (CNA)

Usage of user controlled LD_LIBRARY_PATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.2.0p10 before 2.2.0p17

CWE

CWE-427

References

https://checkmk.com/werk/16226

ADP enrichment

CVE

No English description supplied.

https://checkmk.com/werk/16226

CISA-ADP

No English description supplied.

No references supplied.