CVE-2020-24908: High severity checkmk nagvis vulnerability
Published Feb 19, 2021
·Updated
Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\checkmk\agent\local directory.
Affected Software
36 affected components
Tribe29 Checkmk<1.6.0
Tribe29 Checkmk=1.6.0
Tribe29 Checkmk=1.6.0-p1
Tribe29 Checkmk=1.6.0-p10
Tribe29 Checkmk=1.6.0-p11
Tribe29 Checkmk=1.6.0-p12
Tribe29 Checkmk=1.6.0-p13
Tribe29 Checkmk=1.6.0-p14
Tribe29 Checkmk=1.6.0-p15
Tribe29 Checkmk=1.6.0-p16
Tribe29 Checkmk=1.6.0-p2
Tribe29 Checkmk=1.6.0-p3
Tribe29 Checkmk=1.6.0-p4
Tribe29 Checkmk=1.6.0-p5
Tribe29 Checkmk=1.6.0-p6
Tribe29 Checkmk=1.6.0-p7
Tribe29 Checkmk=1.6.0-p8
Tribe29 Checkmk=1.6.0-p9
CheckMK Checkmk<1.6.0
CheckMK Checkmk=1.6.0
CheckMK Checkmk=1.6.0-p1
CheckMK Checkmk=1.6.0-p10
CheckMK Checkmk=1.6.0-p11
CheckMK Checkmk=1.6.0-p12
CheckMK Checkmk=1.6.0-p13
CheckMK Checkmk=1.6.0-p14
CheckMK Checkmk=1.6.0-p15
CheckMK Checkmk=1.6.0-p16
CheckMK Checkmk=1.6.0-p2
CheckMK Checkmk=1.6.0-p3
CheckMK Checkmk=1.6.0-p4
CheckMK Checkmk=1.6.0-p5
CheckMK Checkmk=1.6.0-p6
CheckMK Checkmk=1.6.0-p7
CheckMK Checkmk=1.6.0-p8
CheckMK Checkmk=1.6.0-p9
Event History
Feb 19, 2021
CVE Published
via MITRE·05:03 AM
Data Sourced
via MITRE·05:03 AM
Description
Frequently Asked Questions
1
What is CVE-2020-24908?
CVE-2020-24908 is a vulnerability in Checkmk before 1.6.0p17 that allows local users to obtain SYSTEM privileges via a Trojan horse shell script in a specific directory.
2
What is the severity of CVE-2020-24908?
The severity of CVE-2020-24908 is high with a CVSS score of 7.8.
3
How does CVE-2020-24908 affect Checkmk?
CVE-2020-24908 affects Checkmk versions before 1.6.0p17.
4
How can local users exploit CVE-2020-24908?
Local users can exploit CVE-2020-24908 by placing a Trojan horse shell script in the %PROGRAMDATA%\checkmk\agent\local directory.
5
Is there a fix available for CVE-2020-24908?
Yes, the fix for CVE-2020-24908 is included in Checkmk version 1.6.0p17.