CVE-2022-33912

A permission issue affects users that deployed the shipped version of the Checkmk Debian package. Packages created by the agent bakery (enterprise editions only) were not affected. Using the shipped version of the agents, the maintainer scripts located at /var/lib/dpkg/info/ will be owned by the user and the group with ID 1001. If such a user exists on the system, they can change the content of these files (which are then executed by root). This leads to a local privilege escalation on the monitored host. Version 1.6 through 1.6.9p29, version 2.0 through 2.0.0p26, version 2.1 through 2.1.0p3, and version 2.2.0i1 are affected.

• CWE-276

• https://checkmk.com/werk/14098Mitigation, Vendor Advisory
• https://checkmk.com/werk/14098Mitigation, Vendor Advisory

Published

Jun 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-33907DMA transactions which are targeted at input buffers used fo…6.4
• CVE-2022-33908DMA transactions which are targeted at input buffers used fo…7
• CVE-2022-33909DMA transactions which are targeted at input buffers used fo…7
• CVE-2022-3391The Retain Live Chat WordPress plugin through 0.1 does not s…4.8
• CVE-2022-33910An XSS vulnerability in MantisBT before 2.25.5 allows remote…5.4
• CVE-2022-33911An issue was discovered in Couchbase Server 7.x before 7.0.4…5.3
• CVE-2022-33913In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22…7.5
• CVE-2022-33915Versions of the Amazon AWS Apache Log4j hotpatch package bef…7
• CVE-2022-33916OPC UA .NET Standard Reference Server 1.04.368 allows a remo…7.5
• CVE-2022-33917An issue was discovered in the Arm Mali GPU Kernel Driver (V…5.5
• CVE-2022-33918Dell GeoDrive, Versions 2.1 - 2.2, contains an information d…5.5
• CVE-2022-33919Dell GeoDrive, versions 2.1 - 2.2, contains an information d…7.8