CVE-2022-46836

PHP code injection in watolib

PHP code injection in watolib auth.php and hosttags.php in Tribe29's Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker to inject and execute PHP code which will be executed upon request of the vulnerable component.

Affected

Tribe29 · Checkmk

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 CHECKMK

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

EPSS

1.13% chance of exploitation in the next 30 days, 66th percentile

Published

2023-02-20

Updated

2024-08-03

Proof-of-concept exploits (1)

• gbrsh/checkmk-race4★ · 2023-09-05

Security advisories

• https://checkmk.com/werk/14383
• https://www.sonarsource.com/blog/checkmk-rce-chain-3

References

• CVE Record
• NVD entry

Related

• CVE-2021-4034
• CVE-2022-29464
• CVE-2022-48321
• CVE-2023-22974
• CVE-2023-28121
• CVE-2023-32243