{"id":20743,"date":"2025-04-10T12:15:08","date_gmt":"2025-04-10T12:15:08","guid":{"rendered":""},"modified":"2025-05-12T12:19:40","modified_gmt":"2025-05-12T12:19:40","slug":"cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/","title":{"rendered":"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk&#8217;s mk_tsm Agent Plugin"},"content":{"rendered":"<p class=\"\" data-start=\"88\" data-end=\"100\"><strong data-start=\"88\" data-end=\"100\">Overview<\/strong><\/p>\n<p class=\"\" data-start=\"102\" data-end=\"335\"><span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">CVE-2023-6735 is a high-severity vulnerability identified in the &#8216;mk_tsm&#8217; agent plugin of Checkmk, a comprehensive IT monitoring system.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">This flaw allows local users to escalate their privileges on affected systems.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">The <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-3248-critical-code-injection-vulnerability-in-langflow-versions-prior-to-1-3-0\/\"  data-wpil-monitor-id=\"30417\">vulnerability affects Checkmk versions prior<\/a> to 2.2.0p18, 2.1.0p38, and 2.0.0p39.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">The issue arises from improper input validation and the unsafe use of the &#8216;eval&#8217; function within the plugin, <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2024-0576-critical-vulnerability-in-totolink-lr1200gb-leading-to-potential-system-compromise\/\"  data-wpil-monitor-id=\"30418\">leading to potential<\/a> exploitation.<\/span> \u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium text-token-text-secondary! bg-[#F4F4F4]! dark:bg-[#303030]!\" href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=2023-6735&amp;utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative bottom-0 left-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">GitHub<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">CVE<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Checkmk<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><\/span><\/a><\/span><span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium text-token-text-secondary! bg-[#F4F4F4]! dark:bg-[#303030]!\" href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2023-6735?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative bottom-0 left-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Checkmk<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Debian Security Tracker<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">AttackerKB<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><\/span><\/a><\/span><span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium text-token-text-secondary! bg-[#F4F4F4]! dark:bg-[#303030]!\" href=\"https:\/\/checkmk.com\/werk\/16273?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative bottom-0 left-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between overflow-hidden\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Checkmk<\/span><\/span><\/span><\/a><\/span><\/p>\n<p class=\"\" data-start=\"337\" data-end=\"362\"><strong data-start=\"337\" data-end=\"362\">Vulnerability Summary<\/strong><\/p>\n<ul data-start=\"364\" data-end=\"987\">\n<li class=\"\" data-start=\"364\" data-end=\"459\">\n<p class=\"\" data-start=\"366\" data-end=\"459\"><strong data-start=\"366\" data-end=\"377\">CVE ID:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">CVE-2023-6735<\/span>\u200b<\/p>\n<\/li>\n<li class=\"\" data-start=\"460\" data-end=\"557\">\n<p class=\"\" data-start=\"462\" data-end=\"557\"><strong data-start=\"462\" data-end=\"475\">Severity:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">High (CVSS Score: 8.8)<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium text-token-text-secondary! bg-[#F4F4F4]! dark:bg-[#303030]!\" href=\"https:\/\/checkmk.com\/werk\/16273?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative bottom-0 left-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between overflow-hidden\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Checkmk<\/span><\/span><\/span><\/a><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"558\" data-end=\"664\">\n<p class=\"\" data-start=\"560\" data-end=\"664\"><strong data-start=\"560\" data-end=\"578\">Attack Vector:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">Local<\/span>\u200b<span class=\"\" data-state=\"closed\"><span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium text-token-text-secondary! bg-[#F4F4F4]! dark:bg-[#303030]!\" href=\"https:\/\/www.cvedetails.com\/cve\/CVE-2023-6735\/?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative bottom-0 left-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between overflow-hidden\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">CVE Database<\/span><\/span><\/span><\/a><\/span><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"665\" data-end=\"777\">\n<p class=\"\" data-start=\"667\" data-end=\"777\"><strong data-start=\"667\" data-end=\"691\">Privileges Required:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">Low<\/span>\u200b<span class=\"\" data-state=\"closed\"><span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium text-token-text-secondary! bg-[#F4F4F4]! dark:bg-[#303030]!\" href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=2023-6735&amp;utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative bottom-0 left-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Checkmk<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+2<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">CVE<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+2<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Debian Security Tracker<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+2<\/span><\/span><\/span><\/a><\/span><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"778\" data-end=\"887\">\n<p class=\"\" data-start=\"780\" data-end=\"887\"><strong data-start=\"780\" data-end=\"801\">User Interaction:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">None<\/span>\u200b<span class=\"\" data-state=\"closed\"><span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium text-token-text-secondary! bg-[#F4F4F4]! dark:bg-[#303030]!\" href=\"https:\/\/checkmk.com\/werk\/16273?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative bottom-0 left-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">GitHub<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Checkmk<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">CVE<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><\/span><\/a><\/span><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"888\" data-end=\"987\">\n<p class=\"\" data-start=\"890\" data-end=\"987\"><strong data-start=\"890\" data-end=\"901\">Impact:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">Confidentiality High, Integrity High, Availability High<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium text-token-text-secondary! bg-[#F4F4F4]! dark:bg-[#303030]!\" href=\"https:\/\/www.cvedetails.com\/cve\/CVE-2023-6735\/?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative bottom-0 left-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Debian Security Tracker<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+3<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">CVE Database<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+3<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Ubuntu<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+3<\/span><\/span><\/span><\/a><\/span><\/p>\n<\/li>\n<\/ul>\n<p class=\"\" data-start=\"989\" data-end=\"1010\"><strong data-start=\"989\" data-end=\"1010\">Affected Products<\/strong><\/p>\n<div class=\"overflow-x-auto bg-no-repeat contain-inline-size\">\n<table data-start=\"1012\" data-end=\"1207\">\n<thead data-start=\"1012\" data-end=\"1043\">\n<tr data-start=\"1012\" data-end=\"1043\">\n<th data-start=\"1012\" data-end=\"1022\">Product<\/th>\n<th data-start=\"1022\" data-end=\"1043\">Affected Versions<\/th>\n<\/tr>\n<\/thead>\n<tbody data-start=\"1076\" data-end=\"1207\">\n<tr data-start=\"1076\" data-end=\"1207\">\n<td><span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">Checkmk<\/span><\/td>\n<td><span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\"><a href=\"https:\/\/www.ameeba.com\/blog\/cve-2024-21632-critical-vulnerability-in-omniauth-microsoft-graph-prior-to-version-2-0-0\/\"  data-wpil-monitor-id=\"30705\">Versions prior<\/a> to 2.2.0p18, 2.1.0p38, and 2.0.0p39<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p class=\"\" data-start=\"1209\" data-end=\"1234\"><strong data-start=\"1209\" data-end=\"1234\">How the Exploit Works<\/strong><\/p>\n<p class=\"\" data-start=\"1236\" data-end=\"1441\"><span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">The <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/\"  data-wpil-monitor-id=\"24581\">vulnerability stems from the &#8216;mk_tsm&#8217; agent plugin&#8217;s<\/a> use of the &#8216;eval&#8217; function without proper input validation.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">An attacker can craft a malicious command that appears in the output of the &#8216;ps&#8217; command.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">Due to insufficient quoting and the unsafe use of &#8216;eval&#8217;, this can lead to the <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-43449-arbitrary-code-execution-vulnerability-in-hummerrisk-software\/\"  data-wpil-monitor-id=\"27401\">execution of arbitrary<\/a> commands with elevated privileges.<\/span> \u200b<span class=\"\" data-state=\"closed\"><span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium text-token-text-secondary! bg-[#F4F4F4]! dark:bg-[#303030]!\" href=\"https:\/\/checkmk.com\/werk\/16273?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative bottom-0 left-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">GitHub<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Checkmk<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">CVE Database<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><\/span><\/a><\/span><\/span><\/p>\n<p class=\"\" data-start=\"1443\" data-end=\"1462\"><strong data-start=\"1443\" data-end=\"1462\">Potential Risks<\/strong><\/p>\n<p class=\"\" data-start=\"1464\" data-end=\"1589\"><span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">Exploitation of this <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2024-21625-critical-remote-code-execution-vulnerability-in-network-protocol\/\"  data-wpil-monitor-id=\"24241\">vulnerability allows a local attacker to execute arbitrary code<\/a> with root privileges.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">This can lead to complete system compromise, unauthorized <a class=\"wpil_keyword_link\" href=\"https:\/\/ameeba.com\"   title=\"access\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"24159\">access<\/a> to sensitive data, and potential lateral movement within the network.<\/span>\u200b<\/p>\n<p class=\"\" data-start=\"1591\" data-end=\"1621\"><strong data-start=\"1591\" data-end=\"1621\">Mitigation Recommendations<\/strong><\/p>\n<ul data-start=\"1623\" data-end=\"1962\">\n<li class=\"\" data-start=\"1623\" data-end=\"1731\">\n<p class=\"\" data-start=\"1625\" data-end=\"1731\"><strong data-start=\"1625\" data-end=\"1645\">Update Software:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">Upgrade Checkmk to version 2.2.0p18, 2.1.0p38, or 2.0.0p39, where this <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-50760-addressing-the-critical-buffer-overflow-vulnerability-in-secure-shell-ssh\/\"  data-wpil-monitor-id=\"24582\">vulnerability has been addressed<\/a>.<\/span>\u200b<span class=\"\" data-state=\"closed\"><span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium text-token-text-secondary! bg-[#F4F4F4]! dark:bg-[#303030]!\" href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=2023-6735&amp;utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative bottom-0 left-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">GitHub<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">CVE<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">AttackerKB<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+5<\/span><\/span><\/span><\/a><\/span><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"1732\" data-end=\"1850\">\n<p class=\"\" data-start=\"1734\" data-end=\"1850\"><strong data-start=\"1734\" data-end=\"1764\">Disable <\/strong><a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-2817-system-level-updater-vulnerability-in-thunderbird-s-update-mechanism\/\"  data-wpil-monitor-id=\"41089\">Vulnerable Plugin: <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">If immediate updating<\/a> is not feasible, disable the &#8216;mk_tsm&#8217; agent plugin to mitigate the risk.<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium text-token-text-secondary! bg-[#F4F4F4]! dark:bg-[#303030]!\" href=\"https:\/\/checkmk.com\/werk\/16273?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative bottom-0 left-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between overflow-hidden\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Checkmk<\/span><\/span><\/span><\/a><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"1851\" data-end=\"1962\">\n<p class=\"\" data-start=\"1853\" data-end=\"1962\"><strong data-start=\"1853\" data-end=\"1876\">Review and Monitor:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">Regularly review <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-24351-remote-logging-vulnerability-in-ctrlx-os-can-lead-to-root-level-system-compromise\/\"  data-wpil-monitor-id=\"42191\">system logs<\/a> and monitor for unusual activities, especially related to the &#8216;mk_tsm&#8217; plugin.<\/span>\u200b<span class=\"\" data-state=\"closed\"><span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium text-token-text-secondary! bg-[#F4F4F4]! dark:bg-[#303030]!\" href=\"https:\/\/checkmk.com\/werk\/16273?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative bottom-0 left-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between overflow-hidden\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Checkmk<\/span><\/span><\/span><\/a><\/span><\/span><\/p>\n<\/li>\n<\/ul>\n<p class=\"\" data-start=\"1964\" data-end=\"1978\"><strong data-start=\"1964\" data-end=\"1978\">Conclusion<\/strong><\/p>\n<p class=\"\" data-start=\"1980\" data-end=\"2145\"><span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">CVE-2023-6735 is a <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-41288-critical-buffer-overflow-vulnerability-in-openssh\/\"  data-wpil-monitor-id=\"24187\">critical vulnerability<\/a> that poses significant risks to systems running affected versions of Checkmk.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">Prompt action is required to update the software or disable the <a href=\"https:\/\/www.ameeba.com\/blog\/microsoft-applauds-encrypthub-for-uncovering-windows-vulnerabilities-a-deeper-look-into-the-incident-consequences-and-preventative-measures\/\"  data-wpil-monitor-id=\"24602\">vulnerable plugin to prevent<\/a> potential exploitation.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded-sm px-px py-[0.2rem]\">Regular monitoring and adherence to best <a class=\"wpil_keyword_link\" href=\"https:\/\/chat.ameeba.com\"   title=\"security\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"24160\">security<\/a> practices are essential to safeguard systems against such vulnerabilities.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Overview CVE-2023-6735 is a high-severity vulnerability identified in the &#8216;mk_tsm&#8217; agent plugin of Checkmk, a comprehensive IT monitoring system. This flaw allows local users to escalate their privileges on affected systems. The vulnerability affects Checkmk versions prior to 2.2.0p18, 2.1.0p38, and 2.0.0p39. The issue arises from improper input validation and the unsafe use of the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[79,88],"product":[],"attack_vector":[76],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-20743","post","type-post","status-publish","format-standard","hentry","category-uncategorized","vendor-github","vendor-linux","attack_vector-privilege-escalation"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"Overview CVE-2023-6735 is a high-severity vulnerability identified in the &#039;mk_tsm&#039; agent plugin of Checkmk, a comprehensive IT monitoring system. This flaw allows local users to escalate their privileges on affected systems. The vulnerability affects Checkmk versions prior to 2.2.0p18, 2.1.0p38, and 2.0.0p39. The issue arises from improper input validation and the unsafe use of the\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Ameeba\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Ameeba Blog - Your Guide to a Safer Digital World.\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk\u2019s mk_tsm Agent Plugin - Ameeba Blog\" \/>\n\t\t<meta property=\"og:description\" content=\"Overview CVE-2023-6735 is a high-severity vulnerability identified in the &#039;mk_tsm&#039; agent plugin of Checkmk, a comprehensive IT monitoring system. This flaw allows local users to escalate their privileges on affected systems. The vulnerability affects Checkmk versions prior to 2.2.0p18, 2.1.0p38, and 2.0.0p39. The issue arises from improper input validation and the unsafe use of the\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-04-10T12:15:08+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-05-12T12:19:40+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk\u2019s mk_tsm Agent Plugin - Ameeba Blog\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Overview CVE-2023-6735 is a high-severity vulnerability identified in the &#039;mk_tsm&#039; agent plugin of Checkmk, a comprehensive IT monitoring system. This flaw allows local users to escalate their privileges on affected systems. The vulnerability affects Checkmk versions prior to 2.2.0p18, 2.1.0p38, and 2.0.0p39. The issue arises from improper input validation and the unsafe use of the\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\\\/#blogposting\",\"name\":\"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk\\u2019s mk_tsm Agent Plugin - Ameeba Blog\",\"headline\":\"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk&#8217;s mk_tsm Agent Plugin\",\"author\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/image-5.png\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#articleImage\"},\"datePublished\":\"2025-04-10T12:15:08+00:00\",\"dateModified\":\"2025-05-12T12:19:40+00:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\\\/#webpage\"},\"articleSection\":\"Uncategorized, Github, Linux, Privilege Escalation\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/category\\\/uncategorized\\\/#listItem\",\"name\":\"Uncategorized\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/category\\\/uncategorized\\\/#listItem\",\"position\":2,\"name\":\"Uncategorized\",\"item\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/category\\\/uncategorized\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\\\/#listItem\",\"name\":\"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk&#8217;s mk_tsm Agent Plugin\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\\\/#listItem\",\"position\":3,\"name\":\"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk&#8217;s mk_tsm Agent Plugin\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/category\\\/uncategorized\\\/#listItem\",\"name\":\"Uncategorized\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#organization\",\"name\":\"Ameeba Blog\",\"description\":\"Your Guide to a Safer Digital World.\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/image-5.png\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\\\/#organizationLogo\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/#author\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/\",\"name\":\"Ameeba\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ead225eeac23a6207666b4137a84523c6b550501a7ee49c81559ebd727825560?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"Ameeba\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\\\/#webpage\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\\\/\",\"name\":\"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk\\u2019s mk_tsm Agent Plugin - Ameeba Blog\",\"description\":\"Overview CVE-2023-6735 is a high-severity vulnerability identified in the 'mk_tsm' agent plugin of Checkmk, a comprehensive IT monitoring system. This flaw allows local users to escalate their privileges on affected systems. The vulnerability affects Checkmk versions prior to 2.2.0p18, 2.1.0p38, and 2.0.0p39. The issue arises from improper input validation and the unsafe use of the\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/#author\"},\"datePublished\":\"2025-04-10T12:15:08+00:00\",\"dateModified\":\"2025-05-12T12:19:40+00:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/\",\"name\":\"Ameeba Blog\",\"description\":\"Your Guide to a Safer Digital World.\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk\u2019s mk_tsm Agent Plugin - Ameeba Blog","description":"Overview CVE-2023-6735 is a high-severity vulnerability identified in the 'mk_tsm' agent plugin of Checkmk, a comprehensive IT monitoring system. This flaw allows local users to escalate their privileges on affected systems. The vulnerability affects Checkmk versions prior to 2.2.0p18, 2.1.0p38, and 2.0.0p39. The issue arises from improper input validation and the unsafe use of the","canonical_url":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/#blogposting","name":"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk\u2019s mk_tsm Agent Plugin - Ameeba Blog","headline":"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk&#8217;s mk_tsm Agent Plugin","author":{"@id":"https:\/\/www.ameeba.com\/blog\/author\/admin\/#author"},"publisher":{"@id":"https:\/\/www.ameeba.com\/blog\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png","@id":"https:\/\/www.ameeba.com\/blog\/#articleImage"},"datePublished":"2025-04-10T12:15:08+00:00","dateModified":"2025-05-12T12:19:40+00:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/#webpage"},"isPartOf":{"@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/#webpage"},"articleSection":"Uncategorized, Github, Linux, Privilege Escalation"},{"@type":"BreadcrumbList","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/#listItem","position":1,"name":"Home","item":"https:\/\/www.ameeba.com\/blog\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/#listItem","name":"Uncategorized"}},{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/#listItem","position":2,"name":"Uncategorized","item":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/#listItem","name":"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk&#8217;s mk_tsm Agent Plugin"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/#listItem","position":3,"name":"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk&#8217;s mk_tsm Agent Plugin","previousItem":{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/#listItem","name":"Uncategorized"}}]},{"@type":"Organization","@id":"https:\/\/www.ameeba.com\/blog\/#organization","name":"Ameeba Blog","description":"Your Guide to a Safer Digital World.","url":"https:\/\/www.ameeba.com\/blog\/","logo":{"@type":"ImageObject","url":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/#organizationLogo"},"image":{"@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/#organizationLogo"}},{"@type":"Person","@id":"https:\/\/www.ameeba.com\/blog\/author\/admin\/#author","url":"https:\/\/www.ameeba.com\/blog\/author\/admin\/","name":"Ameeba","image":{"@type":"ImageObject","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/ead225eeac23a6207666b4137a84523c6b550501a7ee49c81559ebd727825560?s=96&d=mm&r=g","width":96,"height":96,"caption":"Ameeba"}},{"@type":"WebPage","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/#webpage","url":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/","name":"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk\u2019s mk_tsm Agent Plugin - Ameeba Blog","description":"Overview CVE-2023-6735 is a high-severity vulnerability identified in the 'mk_tsm' agent plugin of Checkmk, a comprehensive IT monitoring system. This flaw allows local users to escalate their privileges on affected systems. The vulnerability affects Checkmk versions prior to 2.2.0p18, 2.1.0p38, and 2.0.0p39. The issue arises from improper input validation and the unsafe use of the","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/www.ameeba.com\/blog\/#website"},"breadcrumb":{"@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/#breadcrumblist"},"author":{"@id":"https:\/\/www.ameeba.com\/blog\/author\/admin\/#author"},"creator":{"@id":"https:\/\/www.ameeba.com\/blog\/author\/admin\/#author"},"datePublished":"2025-04-10T12:15:08+00:00","dateModified":"2025-05-12T12:19:40+00:00"},{"@type":"WebSite","@id":"https:\/\/www.ameeba.com\/blog\/#website","url":"https:\/\/www.ameeba.com\/blog\/","name":"Ameeba Blog","description":"Your Guide to a Safer Digital World.","inLanguage":"en-US","publisher":{"@id":"https:\/\/www.ameeba.com\/blog\/#organization"}}]},"og:locale":"en_US","og:site_name":"Ameeba Blog - Your Guide to a Safer Digital World.","og:type":"article","og:title":"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk\u2019s mk_tsm Agent Plugin - Ameeba Blog","og:description":"Overview CVE-2023-6735 is a high-severity vulnerability identified in the 'mk_tsm' agent plugin of Checkmk, a comprehensive IT monitoring system. This flaw allows local users to escalate their privileges on affected systems. The vulnerability affects Checkmk versions prior to 2.2.0p18, 2.1.0p38, and 2.0.0p39. The issue arises from improper input validation and the unsafe use of the","og:url":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/","og:image":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png","og:image:secure_url":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png","article:published_time":"2025-04-10T12:15:08+00:00","article:modified_time":"2025-05-12T12:19:40+00:00","twitter:card":"summary_large_image","twitter:title":"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk\u2019s mk_tsm Agent Plugin - Ameeba Blog","twitter:description":"Overview CVE-2023-6735 is a high-severity vulnerability identified in the 'mk_tsm' agent plugin of Checkmk, a comprehensive IT monitoring system. This flaw allows local users to escalate their privileges on affected systems. The vulnerability affects Checkmk versions prior to 2.2.0p18, 2.1.0p38, and 2.0.0p39. The issue arises from improper input validation and the unsafe use of the","twitter:image":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png"},"aioseo_meta_data":{"post_id":"20743","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"limit_modified_date":false,"created":"2025-04-10 12:37:31","updated":"2026-04-06 11:00:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null,"ai":null,"breadcrumb_settings":null,"seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.ameeba.com\/blog\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/\" title=\"Uncategorized\">Uncategorized<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tCVE-2023-6735: Privilege Escalation Vulnerability in Checkmk\u2019s mk_tsm Agent Plugin\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.ameeba.com\/blog\/"},{"label":"Uncategorized","link":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/"},{"label":"CVE-2023-6735: Privilege Escalation Vulnerability in Checkmk&#8217;s mk_tsm Agent Plugin","link":"https:\/\/www.ameeba.com\/blog\/cve-2023-6735-privilege-escalation-vulnerability-in-checkmks-mk_tsm-agent-plugin\/"}],"_links":{"self":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/20743","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/comments?post=20743"}],"version-history":[{"count":0,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/20743\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/media?parent=20743"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/categories?post=20743"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/tags?post=20743"},{"taxonomy":"vendor","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/vendor?post=20743"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/product?post=20743"},{"taxonomy":"attack_vector","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/attack_vector?post=20743"},{"taxonomy":"asset_type","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/asset_type?post=20743"},{"taxonomy":"severity","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/severity?post=20743"},{"taxonomy":"exploit_status","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/exploit_status?post=20743"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}