ubuntu · CVE-2022-31258

Quick triage

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2022-31258 high priority: Ubuntu including 1 source packages (check-mk), 2 status rows across 2 suites (bionic, upstream): not-affected 1, released 1.

Description:

In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.