CVE-2022-31258
Publication date 20 May 2022
Last updated 25 August 2025
Ubuntu priority
Description
In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| check-mk | 18.04 LTS bionic |
Not affected
|
Notes
0xnishit
fix commit: https://github.com/tribe29/checkmk/commit/235163955cc85c9c4efaa37da9b4b2722054252c
Severity score breakdown
CVSS version: CVSS v3.0
Base score
6.7 · Medium
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H