Local Users Can Escalate Privileges via Least Privilege Violation in Checkmk Agent Plugin

CVE-2024-28824

What is CVE-2024-28824?

The Checkmk agent plugin prior to version 2.3.0b4, as well as versions 2.2.0p24, 2.1.0p41, and the end-of-life version 2.0.0, contains a vulnerability that allows local users to escalate their privileges. This is caused by a combination of least privilege violations and a reliance on untrusted inputs, potentially enabling unauthorized actions within the system. Organizations using affected versions should take immediate action to mitigate the risks associated with this security issue.

References