Beveiligingsadvies

CVE-2022-47909

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-02-20 16:53:37

Laatst bijgewerkt 2024-08-03 15:02:36

Toegewezen door Tribe29

CVSS-score 6.8

Status PUBLISHED

Beschrijving

Livestatus Query Language (LQL) injection in the AuthUser HTTP query header of Tribe29's Checkmk <= 2.1.0p11, Checkmk <= 2.0.0p28, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to perform direct queries to the application's core from localhost.

← Alle CVE's bekijken Bekijk op cve.org ↗