High severity8.8NVD Advisory· Published Mar 25, 2022· Updated Jul 9, 2026
CVE-2021-40904
CVE-2021-40904
Description
The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki (installed by default), which allows embedded php code. As a result, remote code execution is achieved. Successful exploitation requires access to the web management interface, either with valid credentials or with a hijacked session by a user with the role of administrator.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- CheckMK/CheckMK Raw Editiondescription
- Range: 1.5.0 - 1.6.0
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.