Improper neutralization of livestatus command delimiters in ajax_search in Checkmk <= 2.0.0p39, < 2.1.0p37, and < 2.2.0p15 allows arbitrary livestatus command execution for authorized users.
References
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Checkmk

Published: 2023-11-22T16:24:22.002Z

Updated: 2024-08-02T08:21:17.625Z

Reserved: 2023-11-15T16:39:53.614Z

Link: CVE-2023-6157

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2023-11-22T17:15:22.847

Modified: 2024-07-23T19:37:16.630

Link: CVE-2023-6157

cve-icon Redhat

No data.