CVE-2014-2331 Check_MK 1.2.2p2, 1.2.2p3, and 1.2.3i5 allows remote authenticated users to execute arbitrary Python code via a crafted rules.mk file in a snapshot. NOTE: this can be exploited by remote attackers by....
HighCVSS 8.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Check_MK 1.2.2p2, 1.2.2p3, and 1.2.3i5 allows remote authenticated users to execute arbitrary Python code via a crafted rules.mk file in a snapshot. NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| check mk project check mk | <= 1.2.2 | No fix listed |
| check mk project check mk | <= 1.2.3 | No fix listed |