Lucene search
CheckmkCVE-2024-6542HistoryJul 22, 2024 - 10:15 a.m.
CVE-2024-6542
2024-07-2210:15:08
CWE-140
Checkmk
web.nvd.nist.gov
25
cve-2024-6542
livestatus command
checkmk security
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
EPSS
0.001
Percentile
17.7%
Improper neutralization of livestatus command delimiters in mknotifyd in Checkmk <= 2.0.0p39, < 2.1.0p47, < 2.2.0p32 and < 2.3.0p11 allows arbitrary livestatus command execution.
Affected configurations
Node
checkmkcheckmkMatch2.0.0-
ORcheckmkcheckmkMatch2.0.0b1
ORcheckmkcheckmkMatch2.0.0b2
ORcheckmkcheckmkMatch2.0.0b3
ORcheckmkcheckmkMatch2.0.0b4
ORcheckmkcheckmkMatch2.0.0b5
ORcheckmkcheckmkMatch2.0.0b6
ORcheckmkcheckmkMatch2.0.0b7
ORcheckmkcheckmkMatch2.0.0b8
ORcheckmkcheckmkMatch2.0.0i1
ORcheckmkcheckmkMatch2.0.0p1
ORcheckmkcheckmkMatch2.0.0p10
ORcheckmkcheckmkMatch2.0.0p11
ORcheckmkcheckmkMatch2.0.0p12
ORcheckmkcheckmkMatch2.0.0p13
ORcheckmkcheckmkMatch2.0.0p14
ORcheckmkcheckmkMatch2.0.0p15
ORcheckmkcheckmkMatch2.0.0p16
ORcheckmkcheckmkMatch2.0.0p17
ORcheckmkcheckmkMatch2.0.0p18
ORcheckmkcheckmkMatch2.0.0p19
ORcheckmkcheckmkMatch2.0.0p2
ORcheckmkcheckmkMatch2.0.0p20
ORcheckmkcheckmkMatch2.0.0p21
ORcheckmkcheckmkMatch2.0.0p22
ORcheckmkcheckmkMatch2.0.0p23
ORcheckmkcheckmkMatch2.0.0p24
ORcheckmkcheckmkMatch2.0.0p25
ORcheckmkcheckmkMatch2.0.0p26
ORcheckmkcheckmkMatch2.0.0p27
ORcheckmkcheckmkMatch2.0.0p28
ORcheckmkcheckmkMatch2.0.0p29
ORcheckmkcheckmkMatch2.0.0p3
ORcheckmkcheckmkMatch2.0.0p30
ORcheckmkcheckmkMatch2.0.0p31
ORcheckmkcheckmkMatch2.0.0p32
ORcheckmkcheckmkMatch2.0.0p33
ORcheckmkcheckmkMatch2.0.0p34
ORcheckmkcheckmkMatch2.0.0p35
ORcheckmkcheckmkMatch2.0.0p36
ORcheckmkcheckmkMatch2.0.0p37
ORcheckmkcheckmkMatch2.0.0p38
ORcheckmkcheckmkMatch2.0.0p39
ORcheckmkcheckmkMatch2.0.0p4
ORcheckmkcheckmkMatch2.0.0p5
ORcheckmkcheckmkMatch2.0.0p6
ORcheckmkcheckmkMatch2.0.0p7
ORcheckmkcheckmkMatch2.0.0p8
ORcheckmkcheckmkMatch2.0.0p9
ORcheckmkcheckmkMatch2.1.0-
ORcheckmkcheckmkMatch2.1.0b1
ORcheckmkcheckmkMatch2.1.0b2
ORcheckmkcheckmkMatch2.1.0b3
ORcheckmkcheckmkMatch2.1.0b4
ORcheckmkcheckmkMatch2.1.0b5
ORcheckmkcheckmkMatch2.1.0b6
ORcheckmkcheckmkMatch2.1.0b7
ORcheckmkcheckmkMatch2.1.0b8
ORcheckmkcheckmkMatch2.1.0b9
ORcheckmkcheckmkMatch2.1.0p1
ORcheckmkcheckmkMatch2.1.0p10
ORcheckmkcheckmkMatch2.1.0p11
ORcheckmkcheckmkMatch2.1.0p12
ORcheckmkcheckmkMatch2.1.0p13
ORcheckmkcheckmkMatch2.1.0p14
ORcheckmkcheckmkMatch2.1.0p15
ORcheckmkcheckmkMatch2.1.0p16
ORcheckmkcheckmkMatch2.1.0p17
ORcheckmkcheckmkMatch2.1.0p18
ORcheckmkcheckmkMatch2.1.0p19
ORcheckmkcheckmkMatch2.1.0p2
ORcheckmkcheckmkMatch2.1.0p20
ORcheckmkcheckmkMatch2.1.0p21
ORcheckmkcheckmkMatch2.1.0p22
ORcheckmkcheckmkMatch2.1.0p23
ORcheckmkcheckmkMatch2.1.0p24
ORcheckmkcheckmkMatch2.1.0p25
ORcheckmkcheckmkMatch2.1.0p26
ORcheckmkcheckmkMatch2.1.0p27
ORcheckmkcheckmkMatch2.1.0p28
ORcheckmkcheckmkMatch2.1.0p29
ORcheckmkcheckmkMatch2.1.0p3
ORcheckmkcheckmkMatch2.1.0p30
ORcheckmkcheckmkMatch2.1.0p31
ORcheckmkcheckmkMatch2.1.0p32
ORcheckmkcheckmkMatch2.1.0p33
ORcheckmkcheckmkMatch2.1.0p34
ORcheckmkcheckmkMatch2.1.0p35
ORcheckmkcheckmkMatch2.1.0p36
ORcheckmkcheckmkMatch2.1.0p37
ORcheckmkcheckmkMatch2.1.0p38
ORcheckmkcheckmkMatch2.1.0p39
ORcheckmkcheckmkMatch2.1.0p4
ORcheckmkcheckmkMatch2.1.0p40
ORcheckmkcheckmkMatch2.1.0p41
ORcheckmkcheckmkMatch2.1.0p42
ORcheckmkcheckmkMatch2.1.0p43
ORcheckmkcheckmkMatch2.1.0p44
ORcheckmkcheckmkMatch2.1.0p45
ORcheckmkcheckmkMatch2.1.0p46
ORcheckmkcheckmkMatch2.1.0p5
ORcheckmkcheckmkMatch2.1.0p6
ORcheckmkcheckmkMatch2.1.0p7
ORcheckmkcheckmkMatch2.1.0p8
ORcheckmkcheckmkMatch2.1.0p9
ORcheckmkcheckmkMatch2.2.0-
ORcheckmkcheckmkMatch2.2.0b1
ORcheckmkcheckmkMatch2.2.0b2
ORcheckmkcheckmkMatch2.2.0b3
ORcheckmkcheckmkMatch2.2.0b4
ORcheckmkcheckmkMatch2.2.0b5
ORcheckmkcheckmkMatch2.2.0b6
ORcheckmkcheckmkMatch2.2.0b7
ORcheckmkcheckmkMatch2.2.0b8
ORcheckmkcheckmkMatch2.2.0i1
ORcheckmkcheckmkMatch2.2.0p1
ORcheckmkcheckmkMatch2.2.0p10
ORcheckmkcheckmkMatch2.2.0p11
ORcheckmkcheckmkMatch2.2.0p12
ORcheckmkcheckmkMatch2.2.0p13
ORcheckmkcheckmkMatch2.2.0p14
ORcheckmkcheckmkMatch2.2.0p15
ORcheckmkcheckmkMatch2.2.0p16
ORcheckmkcheckmkMatch2.2.0p17
ORcheckmkcheckmkMatch2.2.0p18
ORcheckmkcheckmkMatch2.2.0p19
ORcheckmkcheckmkMatch2.2.0p2
ORcheckmkcheckmkMatch2.2.0p20
ORcheckmkcheckmkMatch2.2.0p21
ORcheckmkcheckmkMatch2.2.0p22
ORcheckmkcheckmkMatch2.2.0p23
ORcheckmkcheckmkMatch2.2.0p24
ORcheckmkcheckmkMatch2.2.0p25
ORcheckmkcheckmkMatch2.2.0p26
ORcheckmkcheckmkMatch2.2.0p27
ORcheckmkcheckmkMatch2.2.0p28
ORcheckmkcheckmkMatch2.2.0p29
ORcheckmkcheckmkMatch2.2.0p3
ORcheckmkcheckmkMatch2.2.0p30
ORcheckmkcheckmkMatch2.2.0p31
ORcheckmkcheckmkMatch2.2.0p4
ORcheckmkcheckmkMatch2.2.0p5
ORcheckmkcheckmkMatch2.2.0p6
ORcheckmkcheckmkMatch2.2.0p7
ORcheckmkcheckmkMatch2.2.0p8
ORcheckmkcheckmkMatch2.2.0p9
ORcheckmkcheckmkMatch2.3.0-
ORcheckmkcheckmkMatch2.3.0p1
ORcheckmkcheckmkMatch2.3.0p10
ORcheckmkcheckmkMatch2.3.0p2
ORcheckmkcheckmkMatch2.3.0p3
ORcheckmkcheckmkMatch2.3.0p4
ORcheckmkcheckmkMatch2.3.0p5
ORcheckmkcheckmkMatch2.3.0p6
ORcheckmkcheckmkMatch2.3.0p7
ORcheckmkcheckmkMatch2.3.0p8
ORcheckmkcheckmkMatch2.3.0p9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Checkmk",
"vendor": "Checkmk GmbH",
"versions": [
{
"lessThan": "2.3.0p11",
"status": "affected",
"version": "2.3.0",
"versionType": "semver"
},
{
"lessThan": "2.2.0p32",
"status": "affected",
"version": "2.2.0",
"versionType": "semver"
},
{
"lessThan": "2.1.0p47",
"status": "affected",
"version": "2.1.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "2.0.0p39",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
]References
Related
cvelist
cvelist
CVE-2024-6542 Livestatus injection in mknotifyd
2024-07-22 09:50:17
nvd
nvd
CVE-2024-6542
2024-07-22 10:15:08
vulnrichment
vulnrichment
CVE-2024-6542 Livestatus injection in mknotifyd
2024-07-22 09:50:17
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
EPSS
0.001
Percentile
17.7%
Related for CVE-2024-6542