CVE-2023-6735

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 12, 2024
Updated: Jul 23, 2024
CWE ID 269
CWE ID 95

Summary

CVE-2023-6735 is a privilege escalation vulnerability affecting the mk_tsm agent plugin in Checkmk versions before 2.2.0p18, 2.1.0p38, and 2.0.0p39. A local user can exploit this issue to gain elevated privileges, potentially compromising the security of the system. The exact cause of the vulnerability is not disclosed, but affected users are urged to update their Checkmk installations to the latest versions as soon as possible to mitigate the risk. This vulnerability could lead to significant security implications if exploited successfully.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Tribe29 Checkmk
  • Checkmk

Affected Vendors

  • Check MK
  • Tribe29

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2023-6735 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions