VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 10, 2023· Updated Aug 28, 2024

Command injection via active checks and REST API

CVE-2023-31209

Description

Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Checkmk/Checkmkllm-fuzzy2 versions
    <2.1.0p32 or <2.0.0p38 or <2.2.0p4+ 1 more
    • (no CPE)range: <2.1.0p32 or <2.0.0p38 or <2.2.0p4
    • (no CPE)range: 2.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.