CVE-2021-40905

CVE-2021-40905 - RCE via eine manipulierte .mkp-Datei Anwendung: CheckMK Management Web Console Software-Revision: Kleiner oder gleich 2.0.0p17 Angriffstyp: RCE Lösung: Noch offen, oder die auf https://exchange.checkmk.com/ geteilten MKPs werden manuell von CheckMK geprüft, die nach bösartigem Co...

CVE-2021-40905

The web management console of CheckMK Enterprise Edition versions 1.5.0 to 2.0.0p9 does not properly sanitise the uploading of ".mkp" files, which are Extension Packages, making remote code execution possible. Successful exploitation requires access to the web management interface, either with...

PT-2022-11333

Name of the Vulnerable Software and Affected Versions CheckMK Enterprise Edition versions 1.5.0 through 2.0.0p9 Description The web management console of CheckMK Enterprise Edition does not properly sanitise the uploading of ".mkp" files, which are Extension Packages, making remote code execution...

Checkmk 代码问题漏洞

Checkmk is an editor. A code issue vulnerability exists in CheckMK Enterprise Edition that stems from a successful exploit requiring access to the web administration interface using valid credentials or by hijacking the session of a user with the administrator role...