Description
Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to write check_mk config files (.mk files) to arbitrary locations via vectors related to row selections.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Gluster Storage 3 | augeas +2 | 1.0.0-10.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | ccs +1 | 0.16.2-81.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | check-mk +1 | 1.2.6p1-3.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | clufter +5 | 0.11.2-1.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | clustermon +3 | 0.16.2-31.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | cman +4 | 3.0.12.1-73.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | corosync +2 | 1.4.7-2.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | ctdb2.5 | 2.5.5-7.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | fence-virt +5 | 0.2.3-19.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | gluster-nagios-addons | 0.2.4-4.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | gluster-nagios-common | 0.2.0-1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | glusterfs +9 | 3.7.1-11.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | glusterfs-server +2 | 3.7.1-11.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | gstatus | 0.64-3.1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | libqb +1 | 0.17.1-1.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | libvirt-lock-sanlock | 0.10.2-54.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | nagios-plugins +4 | 1.4.16-12.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | nagios-server-addons | 0.2.1-4.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | nfs-ganesha +2 | 2.2.0-5.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | nrpe +1 | 2.15-4.1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | openais +2 | 1.1.1-7.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | openstack-swift +5 | 1.13.1-4.el6ost | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | pacemaker +7 | 1.1.12-8.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | pcs | 0.9.139-9.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | pnp4nagios | 0.6.22-2.1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | pynag +1 | 0.9.1-1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | pytalloc +3 | 2.1.1-4.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-blivet | 1:1.0.0.2-1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-cpopen | 1.3-4.el6_5 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-eventlet +1 | 0.14.0-1.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-greenlet +1 | 0.4.2-1.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-keystoneclient +1 | 1:0.9.0-5.el6ost | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-prettytable | 0.7.2-1.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | python-pyudev | 0.15-2.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | redhat-storage-logos | 60.0.20-1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | redhat-storage-server | 3.1.0.3-1.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | resource-agents +1 | 3.9.5-24.el6 | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | userspace-rcu +1 | 0.7.9-2.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 3 | vdsm +14 | 4.16.20-1.2.el6rhs | RHSA-2015:1495 |
| Red Hat Gluster Storage 2 | glusterfs +9 | 3.7.1-11.el5 | RHSA-2015:1495 |
Advisories 1
- RHSA-2015:1495 Red Hat Security Advisory: Red Hat Gluster Storage 3.1 update Red Hat Security Advisories (RHSA) · Aug 8, 2026