logo
Vulnerability feed
CONTRIBUTE

Vulnerability

warn

CVE-2022-47909

Reference to the description:

https://nvd.nist.gov/vuln/detail/CVE-2022-47909

Description:
Livestatus Query Language (LQL) injection in the AuthUser HTTP query header of Tribe29's Checkmk <= 2.1.0p11, Checkmk <= 2.0.0p28, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to perform direct queries to the application's core from localhost.
Last updated date:
07/23/2024
Type:
exploit
Confidence:
HIGH
Date of publishing:
12/21/2023
Reference url to background

https://www.sonarsource.com/blog/checkmk-rce-chain-1/

Vulnerability FeedContributorsAboutBlog

@inTheWild

©2024

Privacy Policy