Description (CNA)
Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8 (beta) allows arbitrary livestatus command execution for authorized users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Checkmk GmbH / Checkmk | affected 2.2.0 before 2.2.0b8; affected 2.1.0 before 2.1.0p28; affected 2.0.0 before 2.0.0p36 |
CWE
CWE-140
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.