8.8

CVE-2023-6157

Improper neutralization of livestatus command delimiters in ajax_search in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
CheckmkCheckmk Version2.0.0 Update-
CheckmkCheckmk Version2.0.0 Updateb1
CheckmkCheckmk Version2.0.0 Updateb2
CheckmkCheckmk Version2.0.0 Updateb3
CheckmkCheckmk Version2.0.0 Updateb4
CheckmkCheckmk Version2.0.0 Updateb5
CheckmkCheckmk Version2.0.0 Updateb6
CheckmkCheckmk Version2.0.0 Updateb7
CheckmkCheckmk Version2.0.0 Updateb8
CheckmkCheckmk Version2.0.0 Updatei1
CheckmkCheckmk Version2.0.0 Updatep1
CheckmkCheckmk Version2.0.0 Updatep10
CheckmkCheckmk Version2.0.0 Updatep11
CheckmkCheckmk Version2.0.0 Updatep12
CheckmkCheckmk Version2.0.0 Updatep13
CheckmkCheckmk Version2.0.0 Updatep14
CheckmkCheckmk Version2.0.0 Updatep15
CheckmkCheckmk Version2.0.0 Updatep16
CheckmkCheckmk Version2.0.0 Updatep17
CheckmkCheckmk Version2.0.0 Updatep18
CheckmkCheckmk Version2.0.0 Updatep19
CheckmkCheckmk Version2.0.0 Updatep2
CheckmkCheckmk Version2.0.0 Updatep20
CheckmkCheckmk Version2.0.0 Updatep21
CheckmkCheckmk Version2.0.0 Updatep22
CheckmkCheckmk Version2.0.0 Updatep23
CheckmkCheckmk Version2.0.0 Updatep24
CheckmkCheckmk Version2.0.0 Updatep25
CheckmkCheckmk Version2.0.0 Updatep26
CheckmkCheckmk Version2.0.0 Updatep27
CheckmkCheckmk Version2.0.0 Updatep28
CheckmkCheckmk Version2.0.0 Updatep29
CheckmkCheckmk Version2.0.0 Updatep3
CheckmkCheckmk Version2.0.0 Updatep30
CheckmkCheckmk Version2.0.0 Updatep31
CheckmkCheckmk Version2.0.0 Updatep32
CheckmkCheckmk Version2.0.0 Updatep33
CheckmkCheckmk Version2.0.0 Updatep34
CheckmkCheckmk Version2.0.0 Updatep35
CheckmkCheckmk Version2.0.0 Updatep36
CheckmkCheckmk Version2.0.0 Updatep37
CheckmkCheckmk Version2.0.0 Updatep38
CheckmkCheckmk Version2.0.0 Updatep39
CheckmkCheckmk Version2.0.0 Updatep4
CheckmkCheckmk Version2.0.0 Updatep5
CheckmkCheckmk Version2.0.0 Updatep6
CheckmkCheckmk Version2.0.0 Updatep7
CheckmkCheckmk Version2.0.0 Updatep8
CheckmkCheckmk Version2.0.0 Updatep9
CheckmkCheckmk Version2.1.0 Update-
CheckmkCheckmk Version2.1.0 Updateb1
CheckmkCheckmk Version2.1.0 Updateb2
CheckmkCheckmk Version2.1.0 Updateb3
CheckmkCheckmk Version2.1.0 Updateb4
CheckmkCheckmk Version2.1.0 Updateb5
CheckmkCheckmk Version2.1.0 Updateb6
CheckmkCheckmk Version2.1.0 Updateb7
CheckmkCheckmk Version2.1.0 Updateb8
CheckmkCheckmk Version2.1.0 Updateb9
CheckmkCheckmk Version2.1.0 Updatep1
CheckmkCheckmk Version2.1.0 Updatep10
CheckmkCheckmk Version2.1.0 Updatep11
CheckmkCheckmk Version2.1.0 Updatep12
CheckmkCheckmk Version2.1.0 Updatep13
CheckmkCheckmk Version2.1.0 Updatep14
CheckmkCheckmk Version2.1.0 Updatep15
CheckmkCheckmk Version2.1.0 Updatep16
CheckmkCheckmk Version2.1.0 Updatep17
CheckmkCheckmk Version2.1.0 Updatep18
CheckmkCheckmk Version2.1.0 Updatep19
CheckmkCheckmk Version2.1.0 Updatep2
CheckmkCheckmk Version2.1.0 Updatep20
CheckmkCheckmk Version2.1.0 Updatep21
CheckmkCheckmk Version2.1.0 Updatep22
CheckmkCheckmk Version2.1.0 Updatep23
CheckmkCheckmk Version2.1.0 Updatep24
CheckmkCheckmk Version2.1.0 Updatep25
CheckmkCheckmk Version2.1.0 Updatep26
CheckmkCheckmk Version2.1.0 Updatep27
CheckmkCheckmk Version2.1.0 Updatep28
CheckmkCheckmk Version2.1.0 Updatep29
CheckmkCheckmk Version2.1.0 Updatep3
CheckmkCheckmk Version2.1.0 Updatep30
CheckmkCheckmk Version2.1.0 Updatep31
CheckmkCheckmk Version2.1.0 Updatep32
CheckmkCheckmk Version2.1.0 Updatep33
CheckmkCheckmk Version2.1.0 Updatep34
CheckmkCheckmk Version2.1.0 Updatep35
CheckmkCheckmk Version2.1.0 Updatep36
CheckmkCheckmk Version2.1.0 Updatep4
CheckmkCheckmk Version2.1.0 Updatep5
CheckmkCheckmk Version2.1.0 Updatep6
CheckmkCheckmk Version2.1.0 Updatep7
CheckmkCheckmk Version2.1.0 Updatep8
CheckmkCheckmk Version2.1.0 Updatep9
CheckmkCheckmk Version2.2.0 Update-
CheckmkCheckmk Version2.2.0 Updateb1
CheckmkCheckmk Version2.2.0 Updateb2
CheckmkCheckmk Version2.2.0 Updateb3
CheckmkCheckmk Version2.2.0 Updateb4
CheckmkCheckmk Version2.2.0 Updateb5
CheckmkCheckmk Version2.2.0 Updateb6
CheckmkCheckmk Version2.2.0 Updateb7
CheckmkCheckmk Version2.2.0 Updateb8
CheckmkCheckmk Version2.2.0 Updatei1
CheckmkCheckmk Version2.2.0 Updatep1
CheckmkCheckmk Version2.2.0 Updatep10
CheckmkCheckmk Version2.2.0 Updatep11
CheckmkCheckmk Version2.2.0 Updatep12
CheckmkCheckmk Version2.2.0 Updatep13
CheckmkCheckmk Version2.2.0 Updatep14
CheckmkCheckmk Version2.2.0 Updatep2
CheckmkCheckmk Version2.2.0 Updatep3
CheckmkCheckmk Version2.2.0 Updatep4
CheckmkCheckmk Version2.2.0 Updatep5
CheckmkCheckmk Version2.2.0 Updatep6
CheckmkCheckmk Version2.2.0 Updatep7
CheckmkCheckmk Version2.2.0 Updatep8
CheckmkCheckmk Version2.2.0 Updatep9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.588
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
security@checkmk.com 7.6 2.8 4.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CWE-140 Improper Neutralization of Delimiters

The product does not neutralize or incorrectly neutralizes delimiters.