Checkmk: Improper Neutralization of Livestatus Command Delimiters
CVE-2024-6542

6.5MEDIUM

Key Information:

Vendor

Checkmk Gmbh

Status
Checkmk
Vendor
CVE Published:
22 July 2024

What is CVE-2024-6542?

Improper neutralization of livestatus command delimiters in mknotifyd in Checkmk <= 2.0.0p39, < 2.1.0p47, < 2.2.0p32 and < 2.3.0p11 allows arbitrary livestatus command execution.

Affected Version(s)

Checkmk 2.3.0 < 2.3.0p11

Checkmk 2.2.0 < 2.2.0p32

Checkmk 2.1.0 < 2.1.0p47

References

https://checkmk.com/werk/17013

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.