Description (CNA)
Livestatus Query Language (LQL) injection in the AuthUser HTTP query header of Tribe29's Checkmk <= 2.1.0p11, Checkmk <= 2.0.0p28, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to perform direct queries to the application's core from localhost.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Tribe29 / Checkmk | affected 2.0.0 through 2.0.0p28; affected 2.1.0 through 2.1.0p11; affected 1.6.0 through 1.6.0p30 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.