Security Advisory

CVE-2023-6157

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-11-22 16:24:22
Last updated 2024-08-02 08:21:17
Assigner Checkmk
State PUBLISHED

Description

Improper neutralization of livestatus command delimiters in ajax_search in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.