CyberRota Analysis
AI-GeneratedThe logfile check legacy database migration in Linuxfabrik monitoring-plugins version 6.0.0 is vulnerable to a local privilege escalation due to improper handling of symlinks during a database migration process. This flaw allows a local user with control over the plugin account to manipulate the migration path, potentially leading to unauthorized access to sensitive files or execution of arbitrary code with elevated privileges. Organizations using this version of the monitoring plugins should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In version 6.0.0, the logfile check legacy database migration moved a predictable path from /tmp with os.rename() and allowed a local user controlling the plugin account to place a symlink that would be followed by sqlite3.connect() during a root-run check.