PT-2022-11333 · Unknown · Checkmk Enterprise Edition

Published 2022-03-25 · Updated 2024-08-04 · CVE-2021-40905

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CheckMK Enterprise Edition versions 1.5.0 through 2.0.0p9

Description The web management console of CheckMK Enterprise Edition does not properly sanitise the uploading of ".mkp" files, which are Extension Packages, making remote code execution possible. Successful exploitation requires access to the web management interface, either with valid credentials or with a hijacked session of a user with administrator role. The vendor states that this is the intended behavior, as admins are supposed to be able to execute code in this manner.

Recommendations For versions 1.5.0 through 2.0.0p9, consider restricting access to the web management interface to minimize the risk of exploitation, and ensure that only authorized users with administrator roles have access to the interface. Additionally, as a temporary workaround, consider implementing strict validation and sanitization of uploaded ".mkp" files to prevent malicious code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-40905

Affected Products

Checkmk Enterprise Edition

References · 7

• 🔥 https://github.com/Edgarloyola/CVE-2021-40905 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-40905 · Security Note
• https://osv.dev/vulnerability/CVE-2021-40905 · Vendor Advisory
• https://t.me/cvenotify/86625 · Telegram Post
• https://t.me/cvenotify/35407 · Telegram Post
• http://checkmk.com · Note
• https://t.me/cvenotify/88900 · Telegram Post