Non évaluée
Livestatus Query Language (LQL) injection in the AuthUser HTTP query header of Tribe29's Checkmk
CVE-2022-47909
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Livestatus Query Language (LQL) injection in the AuthUser HTTP query header of Tribe29's Checkmk <= 2.1.0p11, Checkmk <= 2.0.0p28, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to perform direct queries to the application's core from localhost.
Références
- advisory checkmk.com
- report sonarsource.com