Privilege escalation in mk_tsm

CVE-2023-6735

What is CVE-2023-6735?

The mk_tsm agent plugin in Checkmk software presents a privilege escalation vulnerability that impacts various versions prior to 2.2.0p18, 2.1.0p38, and 2.0.0p39. This vulnerability allows local users to exploit weaknesses within the plugin to gain elevated privileges, potentially leading to unauthorized access and control over the system. It is crucial for organizations utilizing Checkmk to upgrade to the latest versions to mitigate the risks associated with this vulnerability.

References