Improper neutralization of livestatus command delimiters in the availability timeline in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.
References
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Checkmk

Published: 2023-11-22T16:24:15.515Z

Updated: 2024-08-02T08:21:17.614Z

Reserved: 2023-11-15T16:38:31.845Z

Link: CVE-2023-6156

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2023-11-22T17:15:22.537

Modified: 2024-07-23T19:37:16.630

Link: CVE-2023-6156

cve-icon Redhat

No data.