← CVE Intelligence

CVE-2024-28826

Unrestricted upload and download paths in check_sftp PUBLISHED

Description (CNA)

Improper restriction of local upload and download paths in check_sftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 (EOL) allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server.

Affected (CNA)

Vendor / productVersions
Checkmk GmbH / Checkmkaffected 2.3.0 before 2.3.0p4; affected 2.2.0 before 2.2.0p27; affected 2.1.0 before 2.1.0p44; affected 2.0.0 through 2.0.0p39

CWE

CWE-73

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.