CVE-2022-46836

Name of the Vulnerable Software and Affected Versions Checkmk versions 1.6.0 through 1.6.0p29 Checkmk versions 2.0.0 through 2.0.0p27 Checkmk versions 2.1.0 through 2.1.0p10

Description The issue allows an attacker to inject and execute PHP code in the auth.php and hosttags.php files of the watolib component, which will be executed upon request of the vulnerable component.

Recommendations For Checkmk versions 1.6.0 through 1.6.0p29, update to a version later than 1.6.0p29. For Checkmk versions 2.0.0 through 2.0.0p27, update to a version later than 2.0.0p27. For Checkmk versions 2.1.0 through 2.1.0p10, update to a version later than 2.1.0p10.