Werk #983: Fix security issue in code of row selections (checkboxes) (CVSS 4.9 AV:N/AC:M/Au:S/C:N/I:P/A:P)
Komponente | User interface |
Titel | Fix security issue in code of row selections (checkboxes) (CVSS 4.9 AV:N/AC:M/Au:S/C:N/I:P/A:P) |
Datum | 27.05.2014 |
Checkmk Edition | Checkmk Raw (CRE) |
Checkmk-Version | 1.2.5i4 |
Level | Bedeutende Änderung |
Klasse | Sicherheitsfix |
Kompatibilität | Kompatibel - benötigt kein manuelles Eingreifen |
The fixed weakness was:
The check_mk application does allow an attacker to write check_mk config files (.mk files) on arbitrary locations on the server filesystem.