Lucene search

MitreCVE-2021-40905

HistoryMar 25, 2022 - 11:15 p.m.

CVE-2021-40905

2022-03-2523:15:08

CWE-434

mitre

web.nvd.nist.gov

checkmk

enterprise edition

cve-2021-40905

remote code execution

web management

security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.006

Percentile

78.1%

JSON

The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of “.mkp” files, which are Extension Packages, making remote code execution possible. Successful exploitation requires access to the web management interface, either with valid credentials or with a hijacked session of a user with administrator role. NOTE: the vendor states that this is the intended behavior: admins are supposed to be able to execute code in this manner

Affected configurations

Nvd

Node

checkmkcheckmkMatch2.0.0-

checkmkcheckmkMatch2.0.0b1

checkmkcheckmkMatch2.0.0b2

checkmkcheckmkMatch2.0.0b3

checkmkcheckmkMatch2.0.0b4

checkmkcheckmkMatch2.0.0b5

checkmkcheckmkMatch2.0.0b6

checkmkcheckmkMatch2.0.0b7

checkmkcheckmkMatch2.0.0b8

checkmkcheckmkMatch2.0.0i1

checkmkcheckmkMatch2.0.0p1

checkmkcheckmkMatch2.0.0p10

checkmkcheckmkMatch2.0.0p11

checkmkcheckmkMatch2.0.0p12

checkmkcheckmkMatch2.0.0p13

checkmkcheckmkMatch2.0.0p14

checkmkcheckmkMatch2.0.0p15

checkmkcheckmkMatch2.0.0p16

checkmkcheckmkMatch2.0.0p17

checkmkcheckmkMatch2.0.0p2

checkmkcheckmkMatch2.0.0p3

checkmkcheckmkMatch2.0.0p4

checkmkcheckmkMatch2.0.0p5

checkmkcheckmkMatch2.0.0p6

checkmkcheckmkMatch2.0.0p7

checkmkcheckmkMatch2.0.0p8

checkmkcheckmkMatch2.0.0p9

tribe29checkmkRange1.5.0–2.0.0

VendorProductVersionCPE
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*

Vendor	Product	Version	CPE
checkmk	checkmk	2.0.0	cpe:2.3:a:checkmk:checkmk:2.0.0:-::::::
checkmk	checkmk	2.0.0	cpe:2.3:a:checkmk:checkmk:2.0.0:b1::::::
checkmk	checkmk	2.0.0	cpe:2.3:a:checkmk:checkmk:2.0.0:b2::::::
checkmk	checkmk	2.0.0	cpe:2.3:a:checkmk:checkmk:2.0.0:b3::::::
checkmk	checkmk	2.0.0	cpe:2.3:a:checkmk:checkmk:2.0.0:b4::::::
checkmk	checkmk	2.0.0	cpe:2.3:a:checkmk:checkmk:2.0.0:b5::::::
checkmk	checkmk	2.0.0	cpe:2.3:a:checkmk:checkmk:2.0.0:b6::::::
checkmk	checkmk	2.0.0	cpe:2.3:a:checkmk:checkmk:2.0.0:b7::::::
checkmk	checkmk	2.0.0	cpe:2.3:a:checkmk:checkmk:2.0.0:b8::::::
checkmk	checkmk	2.0.0	cpe:2.3:a:checkmk:checkmk:2.0.0:i1::::::

Rows per page:

1-10 of 281

References

checkmk.com

github.com/Edgarloyola/CVE-2021-40905

Social References

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.006

Percentile

78.1%

JSON

Related for CVE-2021-40905