A vulnerability was found in Checkmk up to 2.0.0p38/2.1.0p36/2.2.0p16. It has been declared as critical. This vulnerability affects unknown code of the component jar_signature Agent Plugin. The manipulation leads to uncontrolled search path.

This vulnerability was named CVE-2023-6740. Attacking locally is a requirement. There is no exploit available.

It is recommended to apply a patch to fix this issue.