Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8 (beta) allows arbitrary livestatus command execution for authorized users.
References
Link Resource
https://checkmk.com/werk/15191 Vendor Advisory
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: Tribe29

Published: 2023-05-17T08:24:59.173Z

Updated: 2023-05-17T08:24:59.173Z

Reserved: 2023-04-25T08:49:15.442Z


Link: CVE-2023-31208

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2023-05-17T09:15:10.473

Modified: 2023-05-26T02:15:55.693


Link: CVE-2023-31208

JSON object: View

cve-icon Redhat Information

No data.