Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jq3v-5296-4gwm

Опубликовано: 20 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local permissions.

Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local permissions.

EPSS

Процентиль: 60%
0.00393
Низкий

7.5 High

CVSS3

Дефекты

CWE-20
CWE-77
CWE-78

Связанные уязвимости

CVSS3: 8
ubuntu
почти 3 года назад

Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local permissions.

CVSS3: 8
nvd
почти 3 года назад

Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local permissions.

CVSS3: 8
debian
почти 3 года назад

Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, ...

EPSS

Процентиль: 60%
0.00393
Низкий

7.5 High

CVSS3

Дефекты

CWE-20
CWE-77
CWE-78