PT-2023-15524 · Checkmk · Checkmk

Stefan Schiller · Publicado 2023-02-20 · Atualizado 2024-07-23 · CVE-2022-47909

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Checkmk versions 1.6.0 through 2.1.0p11 Checkmk versions 2.0.0 through 2.0.0p28

Description The issue allows an attacker to perform direct queries to the application's core from localhost by injecting Livestatus Query Language (LQL) in the AuthUser HTTP query header.

Recommendations For Checkmk versions 1.6.0 through 2.1.0p11, update to a version later than 2.1.0p11. For Checkmk versions 2.0.0 through 2.0.0p28, update to a version later than 2.0.0p28. As a temporary workaround, consider restricting access to the AuthUser HTTP query header until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2022-47909

Produtos afetados

Checkmk

Referências · 8

• 🔥 https://sonarsource.com/blog/checkmk-rce-chain-1 · Exploit
• https://t.me/cibsecurity/58532 · Publicação no Telegram
• https://cve.org/CVERecord?id=CVE-2022-47909 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-47909 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-47909 · Nota de Segurança
• https://ubuntu.com/security/CVE-2022-47909 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-47909 · Aviso do Fabricante
• https://checkmk.com/werk/14384 · Aviso do Fabricante