checkmk.com
https://checkmk.com/werk/17028 CVE-2024-38865
MEDIUM
Livestatus command injection in RestAPI
Record summary
CVE-2024-38865 has a selected CVSS score of 6.0 (medium).
Description
Improper neutralization of livestatus command delimiters in a specific endpoint within RestAPI of Checkmk prior to 2.2.0p39, 2.3.0p25, and 2.1.0p51 (EOL) allows arbitrary livestatus command execution. Exploitation requires the attacker to have a contact group assigned to their user account and for an event to originate from a host with the same contact group or from an event generated with an unknown host.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 10, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Default status: unaffected | CVE List | 2.3.0 to < 2.3.0p25 | affected |
| 2.2.0 to < 2.2.0p39 | affected | ||
| 2.1.0 to ≤ 2.1.0p50 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-38865