Description (CNA)
Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Checkmk GmbH / Checkmk | affected 2.2.0 before 2.2.0p15; affected 2.1.0 before 2.1.0p37; affected 2.0.0 through 2.0.0p39 |
CWE
CWE-140
References
ADP enrichment
No English description supplied.