Local Users Abuse Privilege Escalation Vulnerability in Checkmk Agent Plugin

CVE-2024-28829

What is CVE-2024-28829?

The mk_informix Checkmk agent plugin prior to versions 2.3.0p12, 2.2.0p32, 2.1.0p47, and 2.0.0 (which is end-of-life) contains a vulnerability that allows local users to escalate their privileges. This issue arises from a least privilege violation and the reliance on untrusted inputs, presenting significant security risks to systems utilizing these affected versions. It is crucial for users and administrators to assess their environments and take necessary remediation steps to mitigate potential exploitation of this vulnerability.

References