CVE-2023-6156

Livestatus injection in availability timeline

Published Nov 22, 2023 CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Description
Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-58406 Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.
References
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
Checkmk
Published
Updated
Aug 2, 2024, 8:21 AM
Reserved
Nov 15, 2023, 4:38 PM
Status
Modified
Published
Nov 22, 2023, 5:15 PM
Modified
Jun 17, 2026, 6:50 AM