PT-2023-23232 · Checkmk · Checkmk
CVE-2023-31209
·
Publicado
2023-08-10
·
Atualizado
2024-08-26
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Checkmk versions prior to 2.1.0p32
Checkmk versions prior to 2.0.0p38
Checkmk versions prior to 2.2.0p4
Description
The issue is related to the improper neutralization of active check command arguments, which can lead to arbitrary command execution for authenticated users.
Recommendations
For versions prior to 2.1.0p32, update to version 2.1.0p32 or later.
For versions prior to 2.0.0p38, update to version 2.0.0p38 or later.
For versions prior to 2.2.0p4, update to version 2.2.0p4 or later.
Correção
Special Elements Injection
OS Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Checkmk