Lucene search
HistoryFeb 20, 2023 - 5:15 p.m.
CVE-2022-46303
command injection
tribe29 checkmk
arbitrary commands
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
44.1%
Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application’s local permissions.
Affected configurations
Node
checkmkcheckmkMatch2.1.0-
ORcheckmkcheckmkMatch2.1.0b1
ORcheckmkcheckmkMatch2.1.0b2
ORcheckmkcheckmkMatch2.1.0b3
ORcheckmkcheckmkMatch2.1.0b4
ORcheckmkcheckmkMatch2.1.0b5
ORcheckmkcheckmkMatch2.1.0b6
ORcheckmkcheckmkMatch2.1.0b7
ORcheckmkcheckmkMatch2.1.0b8
ORcheckmkcheckmkMatch2.1.0b9
ORcheckmkcheckmkMatch2.1.0p1
ORcheckmkcheckmkMatch2.1.0p10
ORcheckmkcheckmkMatch2.1.0p2
ORcheckmkcheckmkMatch2.1.0p3
ORcheckmkcheckmkMatch2.1.0p4
ORcheckmkcheckmkMatch2.1.0p5
ORcheckmkcheckmkMatch2.1.0p6
ORcheckmkcheckmkMatch2.1.0p7
ORcheckmkcheckmkMatch2.1.0p8
ORcheckmkcheckmkMatch2.1.0p9
Node
checkmkcheckmkMatch2.0.0-
ORcheckmkcheckmkMatch2.0.0b1
ORcheckmkcheckmkMatch2.0.0b2
ORcheckmkcheckmkMatch2.0.0b3
ORcheckmkcheckmkMatch2.0.0b4
ORcheckmkcheckmkMatch2.0.0b5
ORcheckmkcheckmkMatch2.0.0b6
ORcheckmkcheckmkMatch2.0.0b7
ORcheckmkcheckmkMatch2.0.0b8
ORcheckmkcheckmkMatch2.0.0i1
ORcheckmkcheckmkMatch2.0.0p1
ORcheckmkcheckmkMatch2.0.0p10
ORcheckmkcheckmkMatch2.0.0p11
ORcheckmkcheckmkMatch2.0.0p12
ORcheckmkcheckmkMatch2.0.0p13
ORcheckmkcheckmkMatch2.0.0p14
ORcheckmkcheckmkMatch2.0.0p15
ORcheckmkcheckmkMatch2.0.0p16
ORcheckmkcheckmkMatch2.0.0p17
ORcheckmkcheckmkMatch2.0.0p18
ORcheckmkcheckmkMatch2.0.0p19
ORcheckmkcheckmkMatch2.0.0p2
ORcheckmkcheckmkMatch2.0.0p20
ORcheckmkcheckmkMatch2.0.0p21
ORcheckmkcheckmkMatch2.0.0p22
ORcheckmkcheckmkMatch2.0.0p23
ORcheckmkcheckmkMatch2.0.0p24
ORcheckmkcheckmkMatch2.0.0p25
ORcheckmkcheckmkMatch2.0.0p26
ORcheckmkcheckmkMatch2.0.0p27
ORcheckmkcheckmkMatch2.0.0p3
ORcheckmkcheckmkMatch2.0.0p4
ORcheckmkcheckmkMatch2.0.0p5
ORcheckmkcheckmkMatch2.0.0p6
ORcheckmkcheckmkMatch2.0.0p7
ORcheckmkcheckmkMatch2.0.0p8
ORcheckmkcheckmkMatch2.0.0p9
Node
checkmkcheckmkMatch1.6.0-
ORcheckmkcheckmkMatch1.6.0b1
ORcheckmkcheckmkMatch1.6.0b10
ORcheckmkcheckmkMatch1.6.0b11
ORcheckmkcheckmkMatch1.6.0b12
ORcheckmkcheckmkMatch1.6.0b2
ORcheckmkcheckmkMatch1.6.0b3
ORcheckmkcheckmkMatch1.6.0b4
ORcheckmkcheckmkMatch1.6.0b5
ORcheckmkcheckmkMatch1.6.0b6
ORcheckmkcheckmkMatch1.6.0b7
ORcheckmkcheckmkMatch1.6.0b8
ORcheckmkcheckmkMatch1.6.0b9
ORcheckmkcheckmkMatch1.6.0p1
ORcheckmkcheckmkMatch1.6.0p10
ORcheckmkcheckmkMatch1.6.0p11
ORcheckmkcheckmkMatch1.6.0p12
ORcheckmkcheckmkMatch1.6.0p13
ORcheckmkcheckmkMatch1.6.0p14
ORcheckmkcheckmkMatch1.6.0p15
ORcheckmkcheckmkMatch1.6.0p16
ORcheckmkcheckmkMatch1.6.0p17
ORcheckmkcheckmkMatch1.6.0p18
ORcheckmkcheckmkMatch1.6.0p19
ORcheckmkcheckmkMatch1.6.0p2
ORcheckmkcheckmkMatch1.6.0p20
ORcheckmkcheckmkMatch1.6.0p21
ORcheckmkcheckmkMatch1.6.0p22
ORcheckmkcheckmkMatch1.6.0p23
ORcheckmkcheckmkMatch1.6.0p24
ORcheckmkcheckmkMatch1.6.0p25
ORcheckmkcheckmkMatch1.6.0p26
ORcheckmkcheckmkMatch1.6.0p27
ORcheckmkcheckmkMatch1.6.0p28
ORcheckmkcheckmkMatch1.6.0p29
ORcheckmkcheckmkMatch1.6.0p3
ORcheckmkcheckmkMatch1.6.0p4
ORcheckmkcheckmkMatch1.6.0p5
ORcheckmkcheckmkMatch1.6.0p6
ORcheckmkcheckmkMatch1.6.0p7
ORcheckmkcheckmkMatch1.6.0p8
ORcheckmkcheckmkMatch1.6.0p9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| checkmk | checkmk | 2.1.0 | cpe:2.3:a:checkmk:checkmk:2.1.0:-:*:*:*:*:*:* |
| checkmk | checkmk | 2.1.0 | cpe:2.3:a:checkmk:checkmk:2.1.0:b1:*:*:*:*:*:* |
| checkmk | checkmk | 2.1.0 | cpe:2.3:a:checkmk:checkmk:2.1.0:b2:*:*:*:*:*:* |
| checkmk | checkmk | 2.1.0 | cpe:2.3:a:checkmk:checkmk:2.1.0:b3:*:*:*:*:*:* |
| checkmk | checkmk | 2.1.0 | cpe:2.3:a:checkmk:checkmk:2.1.0:b4:*:*:*:*:*:* |
| checkmk | checkmk | 2.1.0 | cpe:2.3:a:checkmk:checkmk:2.1.0:b5:*:*:*:*:*:* |
| checkmk | checkmk | 2.1.0 | cpe:2.3:a:checkmk:checkmk:2.1.0:b6:*:*:*:*:*:* |
| checkmk | checkmk | 2.1.0 | cpe:2.3:a:checkmk:checkmk:2.1.0:b7:*:*:*:*:*:* |
| checkmk | checkmk | 2.1.0 | cpe:2.3:a:checkmk:checkmk:2.1.0:b8:*:*:*:*:*:* |
| checkmk | checkmk | 2.1.0 | cpe:2.3:a:checkmk:checkmk:2.1.0:b9:*:*:*:*:*:* |
References
Related
prion
prion
Command injection
2023-02-20 17:15:00
cvelist
cvelist
CVE-2022-46303 Command injection in SMS notifications
2023-02-20 16:49:49
ubuntucve
ubuntucve
CVE-2022-46303
2023-02-20 00:00:00
osv
osv
CVE-2022-46303
2023-02-20 17:15:12
cve
cve
CVE-2022-46303
2023-02-20 17:15:12
openvas
openvas
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
44.1%
Related for NVD:CVE-2022-46303