icon

We found results for “

CVE-2023-31208

Good to know:

icon

Date: May 17, 2023

Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8 (beta) allows arbitrary livestatus command execution for authorized users.

Language: Python

Severity Score

Severity Score

Weakness Type (CWE)

Command Injection

CWE-77

Improper Neutralization of Delimiters

CWE-140

Top Fix

icon

Upgrade Version

Upgrade to version v2.0.0p36,v2.1.0p28,v2.2.0b8,v2.3.0b1

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): HIGH
Availability (A): HIGH

Do you need more information?

Contact Us