CVE-2022-31258
Publication date 20 May 2022
Last updated 25 August 2025
Ubuntu priority
Description
In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| check-mk | 18.04 LTS bionic |
Not affected
|
Notes
0xnishit
fix commit: https://github.com/tribe29/checkmk/commit/235163955cc85c9c4efaa37da9b4b2722054252c
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
6.7 · Medium
|
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | High |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |