Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2014-0243

Disclosure Date: July 19, 2018 (last updated November 08, 2023)
Check_MK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/check_mk_agent/job.
0
0
Attacker Value
Unknown

CVE-2014-5339

Disclosure Date: September 02, 2014 (last updated October 05, 2023)
Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to write check_mk config files (.mk files) to arbitrary locations via vectors related to row selections.
0
0
Attacker Value
Unknown

CVE-2014-5340

Disclosure Date: September 02, 2014 (last updated October 05, 2023)
The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automation URL.
0
0
Attacker Value
Unknown

CVE-2014-5338

Disclosure Date: August 22, 2014 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the multisite component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the (1) render_status_icons function in htmllib.py or (2) ajax_action function in actions.py.
0
0