CVE-2024-6542

MEDIUM

Livestatus injection in mknotifyd

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-6542 has a selected CVSS score of 6.5 (medium).

Description

Improper neutralization of livestatus command delimiters in mknotifyd in Checkmk <= 2.0.0p39, < 2.1.0p47, < 2.2.0p32 and < 2.3.0p11 allows arbitrary livestatus command execution.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 22, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Checkmk

Browse Checkmk GmbH / Checkmk

Default status: unaffected

CVE List2.3.0 to < 2.3.0p11affected
2.2.0 to < 2.2.0p32affected
2.1.0 to < 2.1.0p47affected
2.0.0 to ≤ 2.0.0p39affected

checkmk

Browse checkmk / checkmk

Default status: unknown

CVE List2.0.0 to ≤ 2.0.0p39affected
2.1.0 to < 2.1.0p47affected
2.2.0 to < 2.2.0p32affected
2.3.0 to < 2.3.0p11affected

References

2