PT-2023-32548 · Checkmk · Checkmk
CVE-2023-6156
·
Published
2023-11-22
·
Updated
2024-07-23
CVSS v3.1
7.6
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
Checkmk versions prior to 2.0.0p39
Checkmk versions prior to 2.1.0p37
Checkmk versions prior to 2.2.0p15
Description
The issue is related to the improper neutralization of livestatus command delimiters in the availability timeline, allowing arbitrary livestatus command execution for authorized users.
Recommendations
For versions prior to 2.0.0p39, update to version 2.0.0p39 or later.
For versions prior to 2.1.0p37, update to version 2.1.0p37 or later.
For versions prior to 2.2.0p15, update to version 2.2.0p15 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Checkmk