Summary
Ein Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.
Product
Checkmk ist eine IT-Monitoring-Software.
Vulnerabilities 2
-
High 7.2
Checkmk NagVis Remote Code Execution
The "NagVis" component within Checkmk is vulnerable to remote code execution. An authenticated attacker with administrative level privileges is able to upload a malicious PHP file and modify specific settings to execute the contents of the file as PHP.
-
Medium 5.4
Checkmk NagVis Reflected Cross-site Scripting
The "NagVis" component within Checkmk is vulnerable to reflected cross-site scripting. An attacker can craft a malicious link that will execute arbitrary JavaScript in the context of the browser once clicked. The attack can be performed on both authenticated …
Revision history
-
#2
CVE ergänzt
-
#1
Initiale Fassung
References
-
Checkmk Werk #16990 vom 2024-07-15
https://checkmk.com/werk/16990