CVE-2022-26563: 
Monit vulnerability analysis and mitigation

An issue was discovered in Tildeslash Monit before version 5.31.0 that allows remote attackers to gain escalated privileges due to improper PAM-authorization. The vulnerability was assigned CVE-2022-26563 and was publicly disclosed on July 18, 2023. The issue affects all versions of Monit prior to 5.31.0 (NVD, Ubuntu Security).

The vulnerability has been assigned a CVSS v3.1 base score of 8.8 (High), with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability is related to incorrect authorization (CWE-863) where Monit does not properly process credentials for disabled accounts. The attack vector is network-accessible, requires low attack complexity, and needs low privileges to execute (NVD, Ubuntu Security).

The vulnerability allows attackers to potentially login to the platform with an expired account using a valid password, leading to unauthorized access and potential privilege escalation. The impact affects all three major security aspects with high severity: confidentiality, integrity, and availability (Ubuntu Security Notice).

The vulnerability is exploitable remotely and requires low attack complexity with low privileges. An attacker could potentially exploit this vulnerability to bypass authentication checks for disabled accounts (Ubuntu Security Notice).

The vulnerability has been fixed in Monit version 5.31.0 and later. Various Linux distributions have released patched versions: Ubuntu 22.04 LTS (1:5.31.0-1ubuntu0.1~esm1), Ubuntu 20.04 LTS (1:5.26.0-4ubuntu0.1~esm1), Ubuntu 18.04 (1:5.25.1-1ubuntu0.1~esm2), Ubuntu 16.04 (1:5.16-2ubuntu0.2+esm2), and Ubuntu 14.04 (1:5.6-2ubuntu0.1+esm3). Users are advised to update to the latest version (Ubuntu Security Notice).