In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.
| Software | From | Fixed in |
|---|---|---|
| tribe29 / checkmk | 1.6.0b10 | 1.6.0b10.x |
| tribe29 / checkmk | 1.6.0b11 | 1.6.0b11.x |
| tribe29 / checkmk | 1.6.0p10 | 1.6.0p10.x |
| tribe29 / checkmk | 1.6.0p17 | 1.6.0p17.x |
| tribe29 / checkmk | 1.6.0p18 | 1.6.0p18.x |
| tribe29 / checkmk | 1.6.0p11 | 1.6.0p11.x |
| tribe29 / checkmk | 1.6.0p12 | 1.6.0p12.x |
| tribe29 / checkmk | 1.6.0p13 | 1.6.0p13.x |
| tribe29 / checkmk | 1.6.0p14 | 1.6.0p14.x |
| tribe29 / checkmk | 1.6.0p15 | 1.6.0p15.x |
| tribe29 / checkmk | 1.6.0p16 | 1.6.0p16.x |
| checkmk / checkmk | 1.6.0-p5 | 1.6.0-p5.x |
| checkmk / checkmk | 1.6.0-p6 | 1.6.0-p6.x |
| checkmk / checkmk | 1.6.0-p7 | 1.6.0-p7.x |
| checkmk / checkmk | 1.6.0-p8 | 1.6.0-p8.x |
| checkmk / checkmk | 1.6.0-p9 | 1.6.0-p9.x |
| checkmk / checkmk | 1.6.0-p10 | 1.6.0-p10.x |
| checkmk / checkmk | 1.6.0-p11 | 1.6.0-p11.x |
| checkmk / checkmk | 1.6.0-p12 | 1.6.0-p12.x |
| checkmk / checkmk | 1.6.0-p13 | 1.6.0-p13.x |
| checkmk / checkmk | 1.6.0-p14 | 1.6.0-p14.x |
| checkmk / checkmk | 1.6.0-p15 | 1.6.0-p15.x |
| checkmk / checkmk | 1.6.0-p16 | 1.6.0-p16.x |
| checkmk / checkmk | 1.6.0-p4 | 1.6.0-p4.x |
| checkmk / checkmk | 1.6.0-p3 | 1.6.0-p3.x |
| checkmk / checkmk | 1.6.0-p2 | 1.6.0-p2.x |
| checkmk / checkmk | 1.6.0-p1 | 1.6.0-p1.x |
| checkmk / checkmk | - | 1.6.0 |
| checkmk / checkmk | 1.6.0-b1 | 1.6.0-b1.x |
| checkmk / checkmk | 1.6.0-b10 | 1.6.0-b10.x |
| checkmk / checkmk | 1.6.0-b12 | 1.6.0-b12.x |
| checkmk / checkmk | 1.6.0-b3 | 1.6.0-b3.x |
| checkmk / checkmk | 1.6.0-b4 | 1.6.0-b4.x |
| checkmk / checkmk | 1.6.0-b5 | 1.6.0-b5.x |
| checkmk / checkmk | 1.6.0-b9 | 1.6.0-b9.x |
| checkmk / checkmk | 2.0.0-p19 | 2.0.0-p19.x |
| checkmk / checkmk | 1.6.0-p19 | 1.6.0-p19.x |
| checkmk / checkmk | 1.6.0-p20 | 1.6.0-p20.x |
| checkmk / checkmk | 1.6.0-p21 | 1.6.0-p21.x |
| checkmk / checkmk | 1.6.0-p22 | 1.6.0-p22.x |
| checkmk / checkmk | 1.6.0-p23 | 1.6.0-p23.x |
| checkmk / checkmk | 1.6.0-p24 | 1.6.0-p24.x |
| checkmk / checkmk | 1.6.0-p25 | 1.6.0-p25.x |
| checkmk / checkmk | 1.6.0-p26 | 1.6.0-p26.x |
| checkmk / checkmk | 1.6.0-p27 | 1.6.0-p27.x |
| checkmk / checkmk | 2.0.0 | 2.0.0.x |
| checkmk / checkmk | 2.0.0-b1 | 2.0.0-b1.x |
| checkmk / checkmk | 2.0.0-b2 | 2.0.0-b2.x |
| checkmk / checkmk | 2.0.0-b3 | 2.0.0-b3.x |
| checkmk / checkmk | 2.0.0-b4 | 2.0.0-b4.x |
| checkmk / checkmk | 2.0.0-b5 | 2.0.0-b5.x |
| checkmk / checkmk | 2.0.0-b6 | 2.0.0-b6.x |
| checkmk / checkmk | 2.0.0-b7 | 2.0.0-b7.x |
| checkmk / checkmk | 2.0.0-b8 | 2.0.0-b8.x |
| checkmk / checkmk | 2.0.0-i1 | 2.0.0-i1.x |
| checkmk / checkmk | 2.0.0-p1 | 2.0.0-p1.x |
| checkmk / checkmk | 2.0.0-p10 | 2.0.0-p10.x |
| checkmk / checkmk | 2.0.0-p11 | 2.0.0-p11.x |
| checkmk / checkmk | 2.0.0-p12 | 2.0.0-p12.x |
| checkmk / checkmk | 2.0.0-p13 | 2.0.0-p13.x |
| checkmk / checkmk | 2.0.0-p14 | 2.0.0-p14.x |
| checkmk / checkmk | 2.0.0-p15 | 2.0.0-p15.x |
| checkmk / checkmk | 2.0.0-p16 | 2.0.0-p16.x |
| checkmk / checkmk | 2.0.0-p17 | 2.0.0-p17.x |
| checkmk / checkmk | 2.0.0-p18 | 2.0.0-p18.x |
| checkmk / checkmk | 2.0.0-p2 | 2.0.0-p2.x |
| checkmk / checkmk | 2.0.0-p3 | 2.0.0-p3.x |
| checkmk / checkmk | 2.0.0-p4 | 2.0.0-p4.x |
| checkmk / checkmk | 2.0.0-p5 | 2.0.0-p5.x |
| checkmk / checkmk | 2.0.0-p6 | 2.0.0-p6.x |
| checkmk / checkmk | 2.0.0-p7 | 2.0.0-p7.x |
| checkmk / checkmk | 2.0.0-p9 | 2.0.0-p9.x |
| checkmk / checkmk | 2.0.0-p8 | 2.0.0-p8.x |
| checkmk / checkmk | 2.1.0-b2 | 2.1.0-b2.x |
| checkmk / checkmk | 2.1.0-b3 | 2.1.0-b3.x |
| checkmk / checkmk | 2.1.0-b4 | 2.1.0-b4.x |
| checkmk / checkmk | 2.1.0-b5 | 2.1.0-b5.x |
| checkmk / checkmk | 2.1.0-b6 | 2.1.0-b6.x |
| checkmk / checkmk | 2.1.0-b7 | 2.1.0-b7.x |
| checkmk / checkmk | 2.1.0-b8 | 2.1.0-b8.x |
| checkmk / checkmk | 2.1.0-b9 | 2.1.0-b9.x |
| checkmk / checkmk | 2.1.0-b1 | 2.1.0-b1.x |
| checkmk / checkmk | 2.0.0-p21 | 2.0.0-p21.x |
| checkmk / checkmk | 2.0.0-p22 | 2.0.0-p22.x |
| checkmk / checkmk | 2.0.0-p23 | 2.0.0-p23.x |
| checkmk / checkmk | 2.0.0-p24 | 2.0.0-p24.x |
| checkmk / checkmk | 2.0.0-p20 | 2.0.0-p20.x |
| checkmk / checkmk | 1.6.0-p28 | 1.6.0-p28.x |