title: Remote Code Execution with Root Privileges via Broad Apache Permissions
description: Broad access controls could allow site users to directly interact with the system Apache installation when providing the reverse proxy configurations for Tribe29's Checkmk <= 2.1.0p6, Checkmk <= 2.0.0p27, and all versions of Checkmk 1.6.0 (EOL) allowing an attacker to perform remote code execution with root privileges on the underlying host.
problem types: CWE-829 Inclusion of Functionality from Untrusted Control Sphere
affected:
{
defaultStatus: unaffected
product: Checkmk
vendor: Tribe29
versions:
lessThanOrEqual: 2.0.0p27, status: affected, version: 2.0.0, versionType: semver
lessThanOrEqual: 2.1.0p6, status: affected, version: 2.1.0, versionType: semver
lessThanOrEqual: 1.6.0p30, status: affected, version: 1.6.0, versionType: semver
}
metrics:
cvssV3_1: [
baseScore: 8.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
version: 3.1
]