PT-2023-23231 · Checkmk · Checkmk

CVE-2023-31208 · Publicado 2023-05-17 · Atualizado 2024-07-23

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.0.0p36 Checkmk versions prior to 2.1.0p28 Checkmk versions prior to 2.2.0b8

Description The issue is related to the improper neutralization of livestatus command delimiters in the RestAPI, allowing arbitrary livestatus command execution for authorized users.

Recommendations For versions prior to 2.0.0p36, update to version 2.0.0p36 or later. For versions prior to 2.1.0p28, update to version 2.1.0p28 or later. For versions prior to 2.2.0b8, update to version 2.2.0b8 or later.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

CWE-140

Identificadores relacionados

CVE-2023-31208

Produtos afetados

Checkmk

Referências · 7

• https://cve.org/CVERecord?id=CVE-2023-31208 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-31208 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-31208 · Aviso do Fabricante
• https://t.me/cibsecurity/64305 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-31208 · Nota de Segurança
• https://ubuntu.com/security/CVE-2023-31208 · Aviso do Fabricante
• https://checkmk.com/werk/15191 · Aviso do Fabricante