PT-2023-16142 · Checkmk · Checkmk
CVE-2023-0284
·
Publicado
2023-01-24
·
Atualizado
2024-07-23
CVSS v3.1
6.8
Média
| Vetor | AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Checkmk versions 1.6.0 and earlier
Checkmk versions 2.0.0 through 2.0.0p32
Checkmk versions 2.1.0 through 2.1.0p19
Description
The issue is related to improper input validation of LDAP user IDs, allowing attackers who can control these IDs to manipulate files on the server.
Recommendations
For Checkmk version 1.6.0, update to a supported version.
For Checkmk versions 2.0.0 through 2.0.0p32, update to version 2.0.0p33 or later.
For Checkmk versions 2.1.0 through 2.1.0p19, update to version 2.1.0p20 or later.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Checkmk