Description
Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2023-58406 | Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users. |
References
| Link | Providers |
|---|---|
| https://checkmk.com/werk/16221 |
|
History
No history.
Status: PUBLISHED
Assigner: Checkmk
Published:
Updated: 2024-08-02T08:21:17.614Z
Reserved: 2023-11-15T16:38:31.845Z
Link: CVE-2023-6156
No data.
Status : Modified
Published: 2023-11-22T17:15:22.537
Modified: 2024-11-21T08:43:16.090
Link: CVE-2023-6156
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD