CVE-2022-46303

HIGH

8.0

Description

Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local permissions.

Details CVE

Score CVSS v3.18.0

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Vecteur d'attaqueADJACENT_NETWORK

ComplexiteHIGH

Privileges requisLOW

Interaction utilisateurNONE

Publie2/20/2023

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

checkmk:checkmk

Faiblesses (CWE)

CWE-20CWE-78

References

https://checkmk.com/werk/14381(security@checkmk.com)

https://checkmk.com/werk/14381(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.