CVE-2022-43440

Published: Feb 9, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29 on a Checkmk server allows the site user to escalate privileges via a manipulated unixcat executable

Affected (86)

Products: Checkmk: Checkmk

Checkmk

1 product

Checkmk

Configuration A

86 vulnerable

Vulnerable Software	Affected Versions
Checkmk Checkmk	Before 1.6.0
Checkmk Checkmk	Version 1.6.0
Checkmk Checkmk	Version 1.6.0 b10
Checkmk Checkmk	Version 1.6.0 b11
Checkmk Checkmk	Version 1.6.0 b12
Checkmk Checkmk	Version 1.6.0 b1
Checkmk Checkmk	Version 1.6.0 b2
Checkmk Checkmk	Version 1.6.0 b3
Checkmk Checkmk	Version 1.6.0 b4
Checkmk Checkmk	Version 1.6.0 b5
Checkmk Checkmk	Version 1.6.0 b6
Checkmk Checkmk	Version 1.6.0 b7
Checkmk Checkmk	Version 1.6.0 b8
Checkmk Checkmk	Version 1.6.0 b9
Checkmk Checkmk	Version 1.6.0 p10
Checkmk Checkmk	Version 1.6.0 p11
Checkmk Checkmk	Version 1.6.0 p12
Checkmk Checkmk	Version 1.6.0 p13
Checkmk Checkmk	Version 1.6.0 p14
Checkmk Checkmk	Version 1.6.0 p15
Checkmk Checkmk	Version 1.6.0 p16
Checkmk Checkmk	Version 1.6.0 p17
Checkmk Checkmk	Version 1.6.0 p18
Checkmk Checkmk	Version 1.6.0 p19
Checkmk Checkmk	Version 1.6.0 p1
Checkmk Checkmk	Version 1.6.0 p20
Checkmk Checkmk	Version 1.6.0 p21
Checkmk Checkmk	Version 1.6.0 p22
Checkmk Checkmk	Version 1.6.0 p23
Checkmk Checkmk	Version 1.6.0 p24
Checkmk Checkmk	Version 1.6.0 p25
Checkmk Checkmk	Version 1.6.0 p26
Checkmk Checkmk	Version 1.6.0 p27
Checkmk Checkmk	Version 1.6.0 p28
Checkmk Checkmk	Version 1.6.0 p2
Checkmk Checkmk	Version 1.6.0 p3
Checkmk Checkmk	Version 1.6.0 p4
Checkmk Checkmk	Version 1.6.0 p5
Checkmk Checkmk	Version 1.6.0 p6
Checkmk Checkmk	Version 1.6.0 p7
Checkmk Checkmk	Version 1.6.0 p8
Checkmk Checkmk	Version 1.6.0 p9
Checkmk Checkmk	Version 2.0.0
Checkmk Checkmk	Version 2.0.0 b1
Checkmk Checkmk	Version 2.0.0 b2
Checkmk Checkmk	Version 2.0.0 b3
Checkmk Checkmk	Version 2.0.0 b4
Checkmk Checkmk	Version 2.0.0 b5
Checkmk Checkmk	Version 2.0.0 b6
Checkmk Checkmk	Version 2.0.0 b7
Checkmk Checkmk	Version 2.0.0 b8
Checkmk Checkmk	Version 2.0.0 i1
Checkmk Checkmk	Version 2.0.0 p10
Checkmk Checkmk	Version 2.0.0 p11
Checkmk Checkmk	Version 2.0.0 p12
Checkmk Checkmk	Version 2.0.0 p13
Checkmk Checkmk	Version 2.0.0 p14
Checkmk Checkmk	Version 2.0.0 p15
Checkmk Checkmk	Version 2.0.0 p16
Checkmk Checkmk	Version 2.0.0 p17
Checkmk Checkmk	Version 2.0.0 p18
Checkmk Checkmk	Version 2.0.0 p19
Checkmk Checkmk	Version 2.0.0 p1
Checkmk Checkmk	Version 2.0.0 p20
Checkmk Checkmk	Version 2.0.0 p21
Checkmk Checkmk	Version 2.0.0 p22
Checkmk Checkmk	Version 2.0.0 p23
Checkmk Checkmk	Version 2.0.0 p24
Checkmk Checkmk	Version 2.0.0 p2
Checkmk Checkmk	Version 2.0.0 p3
Checkmk Checkmk	Version 2.0.0 p4
Checkmk Checkmk	Version 2.0.0 p5
Checkmk Checkmk	Version 2.0.0 p6
Checkmk Checkmk	Version 2.0.0 p7
Checkmk Checkmk	Version 2.0.0 p8
Checkmk Checkmk	Version 2.0.0 p9
Checkmk Checkmk	Version 2.1.0
Checkmk Checkmk	Version 2.1.0 b1
Checkmk Checkmk	Version 2.1.0 b2
Checkmk Checkmk	Version 2.1.0 b3
Checkmk Checkmk	Version 2.1.0 b4
Checkmk Checkmk	Version 2.1.0 b5
Checkmk Checkmk	Version 2.1.0 b6
Checkmk Checkmk	Version 2.1.0 b7
Checkmk Checkmk	Version 2.1.0 b8
Checkmk Checkmk	Version 2.1.0 b9

Related CWEs

CWE-427

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (2)

https://checkmk.com/werk/14087

Source: security@checkmk.com

Vendor Advisory

https://checkmk.com/werk/14087

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.