VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 25, 2022· Updated Aug 4, 2024

CVE-2021-40904

CVE-2021-40904

Description

The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki (installed by default), which allows embedded php code. As a result, remote code execution is achieved. Successful exploitation requires access to the web management interface, either with valid credentials or with a hijacked session by a user with the role of administrator.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • CheckMK/CheckMK Raw Editiondescription
  • Checkmk/Checkmkllm-fuzzy
    Range: 1.5.0 - 1.6.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.