Lucene search

GoogleOSV:CVE-2023-31209

HistoryAug 10, 2023 - 9:15 a.m.

CVE-2023-31209

2023-08-1009:15:12

Google

osv.dev

cve-2023-31209

checkmk

arbitrary command execution

active check command

authenticated users

security vulnerability

software

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.8%

JSON

Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.

CPENameOperatorVersion
checkmkeq2.0.0b6
checkmkeq1.4.0i1
checkmkeq1.2.0b5
checkmkeq1.1.7i2
checkmkeq1.5.0i1
checkmkeq1.1.8b1
checkmkeq1.2.1i2
checkmkeq1.2.5i3
checkmkeq1.1.9i3
checkmkeq1.1.0

Name	Operator	Version
checkmk	eq	2.0.0b6
checkmk	eq	1.4.0i1
checkmk	eq	1.2.0b5
checkmk	eq	1.1.7i2
checkmk	eq	1.5.0i1
checkmk	eq	1.1.8b1
checkmk	eq	1.2.1i2
checkmk	eq	1.2.5i3
checkmk	eq	1.1.9i3
checkmk	eq	1.1.0

Rows per page:

1-10 of 901

References

checkmk.com/werk/15194

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.8%

JSON

Related for OSV:CVE-2023-31209