← Back

CVE-2020-24908

nvd nist
Published: Feb 19, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\checkmk\agent\local directory.

Affected (18)

Products: Checkmk: Checkmk
1 product
Checkmk
Configuration A
18 vulnerable
Vulnerable SoftwareAffected Versions
Checkmk
Before 1.6.0
Version 1.6.0
Version 1.6.0 p10
Version 1.6.0 p11
Version 1.6.0 p12
Version 1.6.0 p13
Version 1.6.0 p14
Version 1.6.0 p15
Version 1.6.0 p16
Version 1.6.0 p1
Version 1.6.0 p2
Version 1.6.0 p3
Version 1.6.0 p4
Version 1.6.0 p5
Version 1.6.0 p6
Version 1.6.0 p7
Version 1.6.0 p8
Version 1.6.0 p9

Timeline

No history available yet.