{"id":"CVE-2023-31210","summary":"Privilege escalation in agent via LD_LIBRARY_PATH","details":"Usage of user controlled LD_LIBRARY_PATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries","modified":"2026-08-12T03:51:24.355042191Z","published":"2023-12-13T08:26:46.452Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"2.2.0p10"},{"fixed":"2.2.0p17"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"Checkmk","cwe_ids":["CWE-427"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/31xxx/CVE-2023-31210.json"},"references":[{"type":"WEB","url":"https://checkmk.com/werk/16226"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/31xxx/CVE-2023-31210.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31210"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/checkmk/checkmk","events":[{"introduced":"324bd38f5b76f73f236e495af0c9228b65d15528"},{"last_affected":"4cbff4e1a0ac90dc4d91939fc63184a0fcc0c3da"}],"database_specific":{"extracted_events":[{"introduced":"2.2.0-p10"},{"last_affected":"2.2.0-p10"},{"introduced":"2.2.0-p11"},{"last_affected":"2.2.0-p11"},{"introduced":"2.2.0-p12"},{"last_affected":"2.2.0-p12"},{"introduced":"2.2.0-p13"},{"last_affected":"2.2.0-p13"},{"introduced":"2.2.0-p14"},{"last_affected":"2.2.0-p14"},{"introduced":"2.2.0-p15"},{"last_affected":"2.2.0-p15"},{"introduced":"2.2.0-p16"},{"last_affected":"2.2.0-p16"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:checkmk:checkmk:2.2.0:p10:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:2.2.0:p11:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:2.2.0:p12:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:2.2.0:p13:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:2.2.0:p14:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:2.2.0:p15:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:2.2.0:p16:*:*:*:*:*:*"]}}],"versions":["2.2.0-p10","2.2.0-p11","2.2.0-p12","2.2.0-p13","2.2.0-p14","2.2.0-p15","2.2.0-p16","v2.2.0p16-rc3","v2.2.0p16","v2.2.0p16-rc2","v2.2.0p16-rc1","v2.2.0p15-rc2","v2.2.0p15","v2.2.0p15-rc1","v2.2.0p14-rc2","v2.2.0p14","v2.2.0p14-rc1","v2.2.0p13-rc2","v2.2.0p13","v2.2.0p13-rc1","v2.2.0p12-rc1","v2.2.0p12","v2.2.0p11-rc1","v2.2.0p11","v2.2.0p10-rc1","v2.2.0p10"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-31210.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}