Read the docs
TI-2014-04356 Aliases CVE-2014-5340GHSA-5396-497v-5r3r

The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle…

Priority MEDIUM 49CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-94.

Summary

The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automation URL.

Why it matters now

EPSS 0.06138 93rd percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 7

CPEVersionsRoleVendor
cpe:2.3:a:check_mk_project:check_mk:*:p3:*:*:*:*:*:*up to 1.2.4VulnerableCheck Mk Project
cpe:2.3:a:check_mk_project:check_mk:1.2.4:*:*:*:*:*:*:*1.2.4VulnerableCheck Mk Project
cpe:2.3:a:check_mk_project:check_mk:1.2.4:p1:*:*:*:*:*:*1.2.4 p1VulnerableCheck Mk Project
cpe:2.3:a:check_mk_project:check_mk:1.2.4:p2:*:*:*:*:*:*1.2.4 p2VulnerableCheck Mk Project
cpe:2.3:a:check_mk_project:check_mk:1.2.5:i1:*:*:*:*:*:*1.2.5 i1VulnerableCheck Mk Project
cpe:2.3:a:check_mk_project:check_mk:1.2.5:i2:*:*:*:*:*:*1.2.5 i2VulnerableCheck Mk Project
cpe:2.3:a:check_mk_project:check_mk:1.2.5:i3:*:*:*:*:*:*1.2.5 i3VulnerableCheck Mk Project
  • cpe:2.3:a:check_mk_project:check_mk:*:p3:*:*:*:*:*:* Versions up to 1.2.4 Vulnerable ·Check Mk Project
  • cpe:2.3:a:check_mk_project:check_mk:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·Check Mk Project
  • cpe:2.3:a:check_mk_project:check_mk:1.2.4:p1:*:*:*:*:*:* Versions 1.2.4 p1 Vulnerable ·Check Mk Project
  • cpe:2.3:a:check_mk_project:check_mk:1.2.4:p2:*:*:*:*:*:* Versions 1.2.4 p2 Vulnerable ·Check Mk Project
  • cpe:2.3:a:check_mk_project:check_mk:1.2.5:i1:*:*:*:*:*:* Versions 1.2.5 i1 Vulnerable ·Check Mk Project
  • cpe:2.3:a:check_mk_project:check_mk:1.2.5:i2:*:*:*:*:*:* Versions 1.2.5 i2 Vulnerable ·Check Mk Project
  • cpe:2.3:a:check_mk_project:check_mk:1.2.5:i3:*:*:*:*:*:* Versions 1.2.5 i3 Vulnerable ·Check Mk Project

Remediation

Red Hat 1 advisory

  • RHSA-2015:1495 Released 2015-07-29 · Red Hat rating Important
    Red Hat Gluster Storage 3.1 update
    • Red Hat Gluster 3 Samba on RHEL-6 libtalloc-2.1.1-4.el6rhs, libtalloc-devel-2.1.1-4.el6rhs, pytalloc-2.1.1-4.el6rhs +1
    • Red Hat Gluster Storage NFS 3.1 on RHEL-6 nfs-ganesha-2.2.0-5.el6rhs, nfs-ganesha-gluster-2.2.0-5.el6rhs, nfs-ganesha-nullfs-2.2.0-5.el6rhs
    • Red Hat Gluster Storage Nagios 3.1 on RHEL-6 check-mk-1.2.6p1-3.el6rhs, check-mk-livestatus-1.2.6p1-3.el6rhs, gluster-nagios-common-0.2.0-1.el6rhs +10
    • Red Hat Gluster Storage Server 3.1 on RHEL-6 augeas-1.0.0-10.el6, augeas-devel-1.0.0-10.el6, augeas-libs-1.0.0-10.el6 +47
    • Red Hat Storage Native Client for Red Hat Enterprise Linux 5 glusterfs-3.7.1-11.el5, glusterfs-api-3.7.1-11.el5, glusterfs-api-devel-3.7.1-11.el5 +7
    • Red Hat Storage Native Client for Red Hat Enterprise Linux 6 glusterfs-3.7.1-11.el6, glusterfs-api-3.7.1-11.el6, glusterfs-api-devel-3.7.1-11.el6 +7

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Gluster 3 Samba on RHEL-6Fixed RHSA-2015:1495
Red Hat Gluster Storage NFS 3.1 on RHEL-6Fixed RHSA-2015:1495
Red Hat Gluster Storage Nagios 3.1 on RHEL-6Fixed RHSA-2015:1495
Red Hat Gluster Storage Server 3.1 on RHEL-6Fixed RHSA-2015:1495
Red Hat Storage Native Client for Red Hat Enterprise Linux 5Fixed RHSA-2015:1495
Red Hat Storage Native Client for Red Hat Enterprise Linux 6Fixed RHSA-2015:1495

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-5340
  2. 2026-10-03 Alias added: GHSA-5396-497v-5r3r

References

Patch 1

Advisory 1

Other 1

  • TI-2014-01849 Check_MK 1.2.2p2, 1.2.2p3, and 1.2.3i5 allows remote authenticated users to execute… CVSS 2.0HIGH 8.5
  • TI-2014-01848 Multiple cross-site request forgery (CSRF) vulnerabilities in the Multisite GUI in… CVSS 2.0MEDIUM 6.8
  • TI-2017-07162 A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to… CVSS 3.0MEDIUM 6.1
  • TI-2017-08509 Cross-site scripting in Tenable Check_MK CVSS 3.0MEDIUM 6.1
  • TI-2014-01850 Check_MK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows remote authenticated users to… CVSS 2.0MEDIUM 5.5
  • TI-2014-04355 Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to… CVSS 2.0MEDIUM 4.9
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences