CVE-2021-40905

CVE-2021-40905 - 조작된 .mkp 파일을 통한 RCE 애플리케이션: CheckMK 관리 웹 콘솔 소프트웨어 버전: 2.0.0p17 이하 공격 유형: RCE 해결 방법: 추후 결정 또는 https://exchange.checkmk.com/에 공유된 MKP는 CheckMk에서 수동으로 검토하며 악성 코드나 의심스러운 임포트 등을 확인합니다. 요약: CheckMk Enterprise Edition버전 1.5.0 2.0.0p17의 웹 관리 콘솔은 확장 패키지인 ".mkp" 파일 업로드를 적절히 검증하지 않아 원격 코드 실...

CVE-2021-40905

The web management console of CheckMK Enterprise Edition versions 1.5.0 to 2.0.0p9 does not properly sanitise the uploading of ".mkp" files, which are Extension Packages, making remote code execution possible. Successful exploitation requires access to the web management interface, either with...

CVE-2021-40905: Unrestricted Upload of File with Dangerous Type

The web management console of CheckMK Enterprise Edition versions 1.5.0 to 2.0.0p9 does not properly sanitise the uploading of ".mkp" files, which are Extension Packages, making remote code execution possible. Successful exploitation requires access to the web management interface, either with...

Checkmk 代码问题漏洞

Checkmk is an editor. A code issue vulnerability exists in CheckMK Enterprise Edition that stems from a successful exploit requiring access to the web administration interface using valid credentials or by hijacking the session of a user with the administrator role...

PT-2022-11333

Name of the Vulnerable Software and Affected Versions CheckMK Enterprise Edition versions 1.5.0 through 2.0.0p9 Description The web management console of CheckMK Enterprise Edition does not properly sanitise the uploading of ".mkp" files, which are Extension Packages, making remote code execution...