← CVE Intelligence

CVE-2022-46303

Command injection in SMS notifications PUBLISHED

Description (CNA)

Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local permissions.

Affected (CNA)

Vendor / productVersions
Tribe29 / Checkmkaffected 2.0.0 through 2.0.0p27; affected 2.1.0 through 2.1.0p10; affected 1.6.0 through 1.6.0p29

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.