CVE-2020-24908 - Vulnerability Details

Vendors	Products
Checkmk	Checkmk

Link	Providers
https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\\checkmk\\agent\\local directory."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-02-19T05:03:07", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2020-24908", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\\checkmk\\agent\\local directory."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt", "refsource": "MISC", "url": "https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T15:19:09.439Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2020-24908", "datePublished": "2021-02-19T05:03:07", "dateReserved": "2020-08-28T00:00:00", "dateUpdated": "2024-08-04T15:19:09.439Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\checkmk\agent\local directory. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2021-02-19T05:03:07 (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

ID : CVE-2020-24908 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\checkmk\agent\local directory. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt (string)

refsource : MISC (string)

url : https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T15:19:09.439Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2020-24908 (string)

datePublished : 2021-02-19T05:03:07 (string)

dateReserved : 2020-08-28T00:00:00 (string)

dateUpdated : 2024-08-04T15:19:09.439Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:*", "matchCriteriaId": "706DB623-2336-4C3A-8393-CC7C1C71A1F0", "versionEndExcluding": "1.6.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:*", "matchCriteriaId": "5D63367A-3B90-462E-B6AD-1CB5721FD45E", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p1:*:*:*:*:*:*", "matchCriteriaId": "30F84B89-7EC6-44E6-A164-4C170379D55C", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p10:*:*:*:*:*:*", "matchCriteriaId": "DDA94D2F-F27C-4DF6-84AE-8ED1BBC7F61E", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p11:*:*:*:*:*:*", "matchCriteriaId": "71CF8EFD-17F6-4D9A-961A-4B949A6C8B61", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p12:*:*:*:*:*:*", "matchCriteriaId": "B04DC2A8-CF05-4FB2-AE2F-AE07943B998D", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p13:*:*:*:*:*:*", "matchCriteriaId": "1F3BECA6-983C-436E-A635-4E1FB9080E56", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p14:*:*:*:*:*:*", "matchCriteriaId": "51A9A2B4-3693-490A-94E2-64E1DB795646", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p15:*:*:*:*:*:*", "matchCriteriaId": "C14AB385-8A9F-46FA-A1C5-4A4A45C1B7F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p16:*:*:*:*:*:*", "matchCriteriaId": "EC41CC5F-F088-4E65-B076-35665F0F6C7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p2:*:*:*:*:*:*", "matchCriteriaId": "D49B1D63-8FDD-45FD-99F0-AA9E4FBCCB00", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p3:*:*:*:*:*:*", "matchCriteriaId": "9CCE5845-1B77-4E97-B508-41400F4E1F31", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p4:*:*:*:*:*:*", "matchCriteriaId": "3FCED94F-7683-40FE-B511-F1F49CDD1F73", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p5:*:*:*:*:*:*", "matchCriteriaId": "0C4E70EC-3D46-40CE-AD59-597EFD721014", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p6:*:*:*:*:*:*", "matchCriteriaId": "12E695A8-9A1E-4D7A-AB3B-AAC2CF777773", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p7:*:*:*:*:*:*", "matchCriteriaId": "653632A8-E700-404A-ADB2-B3A50253ECB0", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p8:*:*:*:*:*:*", "matchCriteriaId": "60733789-DDA3-4819-A9F1-70B76AC715CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:checkmk:checkmk:1.6.0:p9:*:*:*:*:*:*", "matchCriteriaId": "D90DBA66-EF97-4CE9-AD4C-3A82F70D2250", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\\checkmk\\agent\\local directory."}, {"lang": "es", "value": "Checkmk versiones anteriores a 1.6.0p17, permite a usuarios locales alcanzar privilegios SYSTEM por medio de un script de shell de tipo caballo de Troya en el directorio %PROGRAMDATA%\\checkmk\\agent\\local"}], "id": "CVE-2020-24908", "lastModified": "2024-11-21T05:16:11.700", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-02-19T06:15:12.510", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 706DB623-2336-4C3A-8393-CC7C1C71A1F0 (string)

versionEndExcluding : 1.6.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:* (string)

matchCriteriaId : 5D63367A-3B90-462E-B6AD-1CB5721FD45E (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p1:*:*:*:*:*:* (string)

matchCriteriaId : 30F84B89-7EC6-44E6-A164-4C170379D55C (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p10:*:*:*:*:*:* (string)

matchCriteriaId : DDA94D2F-F27C-4DF6-84AE-8ED1BBC7F61E (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p11:*:*:*:*:*:* (string)

matchCriteriaId : 71CF8EFD-17F6-4D9A-961A-4B949A6C8B61 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p12:*:*:*:*:*:* (string)

matchCriteriaId : B04DC2A8-CF05-4FB2-AE2F-AE07943B998D (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p13:*:*:*:*:*:* (string)

matchCriteriaId : 1F3BECA6-983C-436E-A635-4E1FB9080E56 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p14:*:*:*:*:*:* (string)

matchCriteriaId : 51A9A2B4-3693-490A-94E2-64E1DB795646 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p15:*:*:*:*:*:* (string)

matchCriteriaId : C14AB385-8A9F-46FA-A1C5-4A4A45C1B7F5 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p16:*:*:*:*:*:* (string)

matchCriteriaId : EC41CC5F-F088-4E65-B076-35665F0F6C7E (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p2:*:*:*:*:*:* (string)

matchCriteriaId : D49B1D63-8FDD-45FD-99F0-AA9E4FBCCB00 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p3:*:*:*:*:*:* (string)

matchCriteriaId : 9CCE5845-1B77-4E97-B508-41400F4E1F31 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p4:*:*:*:*:*:* (string)

matchCriteriaId : 3FCED94F-7683-40FE-B511-F1F49CDD1F73 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p5:*:*:*:*:*:* (string)

matchCriteriaId : 0C4E70EC-3D46-40CE-AD59-597EFD721014 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p6:*:*:*:*:*:* (string)

matchCriteriaId : 12E695A8-9A1E-4D7A-AB3B-AAC2CF777773 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p7:*:*:*:*:*:* (string)

matchCriteriaId : 653632A8-E700-404A-ADB2-B3A50253ECB0 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p8:*:*:*:*:*:* (string)

matchCriteriaId : 60733789-DDA3-4819-A9F1-70B76AC715CB (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:checkmk:checkmk:1.6.0:p9:*:*:*:*:*:* (string)

matchCriteriaId : D90DBA66-EF97-4CE9-AD4C-3A82F70D2250 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\checkmk\agent\local directory. (string)

}

1 : { »

lang : es (string)

value : Checkmk versiones anteriores a 1.6.0p17, permite a usuarios locales alcanzar privilegios SYSTEM por medio de un script de shell de tipo caballo de Troya en el directorio %PROGRAMDATA%\checkmk\agent\local (string)

}

]

id : CVE-2020-24908 (string)

lastModified : 2024-11-21T05:16:11.700 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : LOCAL (string)

authentication : NONE (string)

availabilityImpact : COMPLETE (string)

baseScore : 7.2 (number)

confidentialityImpact : COMPLETE (string)

integrityImpact : COMPLETE (string)

vectorString : AV:L/AC:L/Au:N/C:C/I:C/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 10 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2021-02-19T06:15:12.510 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://compass-security.com/fileadmin/Research/Advisories/2020-05_CSNC-2020-005_Checkmk_Local_Privilege_Escalation.txt (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-Other (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object