CVE-2024-47091— Privilege escalation via mk_mysql agent plugin on Windows

Privilege escalation via mk_mysql agent plugin on Windows

Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allows a local unprivileged user able to create a Windows service whose name matches 'MySQL' or 'MariaDB' (or with write access to a binary referenced by such a service) to execute arbitrary code in the context of the Checkmk agent service, which typically runs as SYSTEM.

N/A

对搜索路径元素未加控制

Checkmk 代码问题漏洞

Checkmk是Checkmk公司的一个 IT 监控平台。 Checkmk 2.4.0p29之前版本、2.3.0p47之前版本和2.2.0版本存在代码问题漏洞，该漏洞源于Windows上mk_mysql代理插件中的权限提升问题，可能导致本地非特权用户创建名称匹配MySQL或MariaDB的Windows服务来执行任意代码。

N/A

N/A