CVE-2024-0670: Privilege escalation in windows agent
Published Mar 11, 2024
·Updated
Privilege escalation in windows agent plugin in Checkmk before 2.2.0p23, 2.1.0p40 and 2.0.0 (EOL) allows local user to escalate privileges
Affected Software
83 affected components
All of the following
Any of the following
Checkmk NagVis>=2.0.0<2.1.0
Checkmk NagVis=2.1.0
Checkmk NagVis=2.1.0-b1
Checkmk NagVis=2.1.0-b2
Checkmk NagVis=2.1.0-b3
Checkmk NagVis=2.1.0-b4
Checkmk NagVis=2.1.0-b5
Checkmk NagVis=2.1.0-b6
Checkmk NagVis=2.1.0-b7
Checkmk NagVis=2.1.0-b8
Checkmk NagVis=2.1.0-b9
Checkmk NagVis=2.1.0-p1
Checkmk NagVis=2.1.0-p10
Checkmk NagVis=2.1.0-p11
Checkmk NagVis=2.1.0-p12
Checkmk NagVis=2.1.0-p13
Checkmk NagVis=2.1.0-p14
Checkmk NagVis=2.1.0-p15
Checkmk NagVis=2.1.0-p16
Checkmk NagVis=2.1.0-p17
Checkmk NagVis=2.1.0-p18
Checkmk NagVis=2.1.0-p19
Checkmk NagVis=2.1.0-p2
Checkmk NagVis=2.1.0-p20
Checkmk NagVis=2.1.0-p21
Checkmk NagVis=2.1.0-p22
Checkmk NagVis=2.1.0-p23
Checkmk NagVis=2.1.0-p24
Checkmk NagVis=2.1.0-p25
Checkmk NagVis=2.1.0-p26
Checkmk NagVis=2.1.0-p27
Checkmk NagVis=2.1.0-p28
Checkmk NagVis=2.1.0-p29
Checkmk NagVis=2.1.0-p3
Checkmk NagVis=2.1.0-p30
Checkmk NagVis=2.1.0-p31
Checkmk NagVis=2.1.0-p32
Checkmk NagVis=2.1.0-p33
Checkmk NagVis=2.1.0-p34
Checkmk NagVis=2.1.0-p35
Checkmk NagVis=2.1.0-p36
Checkmk NagVis=2.1.0-p37
Checkmk NagVis=2.1.0-p38
Checkmk NagVis=2.1.0-p39
Checkmk NagVis=2.1.0-p4
Checkmk NagVis=2.1.0-p5
Checkmk NagVis=2.1.0-p6
Checkmk NagVis=2.1.0-p7
Checkmk NagVis=2.1.0-p8
Checkmk NagVis=2.1.0-p9
Checkmk NagVis=2.2.0
Checkmk NagVis=2.2.0-b1
Checkmk NagVis=2.2.0-b2
Checkmk NagVis=2.2.0-b3
Checkmk NagVis=2.2.0-b4
Checkmk NagVis=2.2.0-b5
Checkmk NagVis=2.2.0-b6
Checkmk NagVis=2.2.0-b7
Checkmk NagVis=2.2.0-b8
Checkmk NagVis=2.2.0-i1
Checkmk NagVis=2.2.0-p1
Checkmk NagVis=2.2.0-p10
Checkmk NagVis=2.2.0-p11
Checkmk NagVis=2.2.0-p12
Checkmk NagVis=2.2.0-p13
Checkmk NagVis=2.2.0-p14
Checkmk NagVis=2.2.0-p15
Checkmk NagVis=2.2.0-p16
Checkmk NagVis=2.2.0-p17
Checkmk NagVis=2.2.0-p18
Checkmk NagVis=2.2.0-p19
Checkmk NagVis=2.2.0-p2
Checkmk NagVis=2.2.0-p20
Checkmk NagVis=2.2.0-p21
Checkmk NagVis=2.2.0-p22
Checkmk NagVis=2.2.0-p3
Checkmk NagVis=2.2.0-p4
Checkmk NagVis=2.2.0-p5
Checkmk NagVis=2.2.0-p6
Checkmk NagVis=2.2.0-p7
Checkmk NagVis=2.2.0-p8
Checkmk NagVis=2.2.0-p9
Microsoft Windows
Event History
Mar 11, 2024
CVE Published
via MITRE·02:50 PM
Data Sourced
via MITRE·02:50 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-0670?
CVE-2024-0670 has been classified as a privilege escalation vulnerability in Checkmk.
2
How do I fix CVE-2024-0670?
To fix CVE-2024-0670, upgrade to Checkmk versions 2.2.0p23, 2.1.0p40, or later.
3
Who is affected by CVE-2024-0670?
CVE-2024-0670 affects local users of Checkmk versions prior to 2.2.0p23, 2.1.0p40, and 2.0.0.
4
What versions of Checkmk are impacted by CVE-2024-0670?
Versions of Checkmk affected by CVE-2024-0670 include those before 2.2.0p23, 2.1.0p40, and 2.0.0.
5
What type of vulnerability is CVE-2024-0670?
CVE-2024-0670 is a privilege escalation vulnerability within the Windows agent plugin of Checkmk.