PT-2022-11332 · Unknown+1 · Checkmk Raw Edition+1

Published 2022-03-25 · Updated 2024-07-23 · CVE-2021-40904

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CheckMK Raw Edition versions 1.5.0 through 1.6.0

Description The issue concerns a misconfiguration in the web management console of CheckMK Raw Edition, specifically with the Dokuwiki web-app that is installed by default. This misconfiguration allows for the embedding of php code, which can lead to remote code execution. To exploit this issue, an attacker must have access to the web management interface, either by using valid credentials or by hijacking a session of a user with administrator privileges.

Recommendations For CheckMK Raw Edition versions 1.5.0 through 1.6.0, ensure that the Dokuwiki web-app is properly configured to prevent the embedding of php code, and restrict access to the web management interface to authorized personnel only. As a temporary workaround, consider restricting access to the Dokuwiki web-app until a proper configuration can be applied.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2021-40904

Affected Products

Checkmk Raw Edition

Dokuwiki

References · 7

• 🔥 https://github.com/Edgarloyola/CVE-2021-40904 · Exploit
• https://osv.dev/vulnerability/CVE-2021-40904 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-40904 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-40904 · Security Note
• https://ubuntu.com/security/CVE-2021-40904 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40904 · Security Note
• http://checkmk.com · Note