Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Checkmk 2.1.0p37, 2.2.0p15 Clear all filters
TI-2023-05662 CVE-2023-6157 · GHSA-2rm3-j8qf-6fg4

Livestatus injection in ajax_search

Priority MEDIUM 40

Improper neutralization of livestatus command delimiters in ajax_search in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00888 Published 2023-11-22 Fixed in 2.2.0p15, 2.1.0p37 CWE-140
TI-2023-05661 CVE-2023-6156 · GHSA-6p6g-x56f-467g

Livestatus injection in availability timeline

Priority MEDIUM 40

Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00857 Published 2023-11-22 Fixed in 2.2.0p15, 2.1.0p37 CWE-140