PT-2023-32548 · Checkmk · Checkmk
CVE-2023-6156
·
Publicado
2023-11-22
·
Atualizado
2024-07-23
CVSS v3.1
7.6
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
Checkmk versions prior to 2.0.0p39
Checkmk versions prior to 2.1.0p37
Checkmk versions prior to 2.2.0p15
Description
The issue is related to the improper neutralization of livestatus command delimiters in the availability timeline, allowing arbitrary livestatus command execution for authorized users.
Recommendations
For versions prior to 2.0.0p39, update to version 2.0.0p39 or later.
For versions prior to 2.1.0p37, update to version 2.1.0p37 or later.
For versions prior to 2.2.0p15, update to version 2.2.0p15 or later.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Checkmk