title: Privilege escalation in mk_oracle plugins
description: Least privilege violation in the Checkmk agent plugins mk_oracle, mk_oracle.ps1, and mk_oracle_crs before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41 and 2.0.0 (EOL) allows local users to escalate privileges.
problem types: CWE-272: Least Privilege Violation
affected:
{
defaultStatus: unaffected
product: Checkmk
vendor: Checkmk GmbH
versions:
lessThan: 2.3.0b4, status: affected, version: 2.3.0, versionType: semver
lessThan: 2.2.0p24, status: affected, version: 2.2.0, versionType: semver
lessThan: 2.1.0p41, status: affected, version: 2.1.0, versionType: semver
lessThanOrEqual: 2.0.0p39, status: affected, version: 2.0.0, versionType: semver
}
metrics:
cvssV3_1: [
baseScore: 8.2
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
]