未評価
Unrestricted upload and download paths in check_sftp
CVE-2024-28826
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Improper restriction of local upload and download paths in check_sftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 (EOL) allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web checkmk.com