CVE-2022-43440

—

CVSS 3.1

7.8 high

EPSS

<1%p14

Published

Feb 9, 2023 (Feb 9, 2023)

Modified

Jun 17, 2026

Description

Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29 on a Checkmk server allows the site user to escalate privileges via a manipulated unixcat executable

Vendors: checkmk
Products: checkmk
Weakness: CWE-427
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.