PT-2025-2259

CVE-2024-13723

Publicado

2025-02-04

Atualizado

2025-05-01

Descrição por

CVSS 3.1

7.2

Alta

MétricasAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Checkmk (affected versions not specified)

Description The issue concerns the "NagVis" component within Checkmk, which is susceptible to remote code execution. An authenticated attacker with administrative level privileges can upload a malicious PHP file and modify specific settings to execute the contents of the file as PHP.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Explorabilidade

Exploit

Impactos

Pesquisadores

Jaggar Henry

Jim Becher

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-434: Unrestricted Upload of File with Dangerous Type

Identificadores relacionados