• Menu
  • Skip to main content
  • Skip to primary sidebar

The Cyber Security News

Latest Cyber Security News

Header Right

  • Latest News
  • Vulnerabilities
  • Cloud Services
multiple vulnerabilities reported in checkmk it infrastructure monitoring software

Multiple Vulnerabilities Reported in Checkmk IT Infrastructure Monitoring Software

You are here: Home / General Cyber Security News / Multiple Vulnerabilities Reported in Checkmk IT Infrastructure Monitoring Software
November 2, 2022

Many vulnerabilities have been disclosed in Checkmk IT Infrastructure monitoring software that could be chained collectively by an unauthenticated, distant attacker to totally choose in excess of affected servers.

“These vulnerabilities can be chained collectively by an unauthenticated, distant attacker to acquire code execution on the server operating Checkmk variation 2.1.0p10 and lessen,” SonarSource researcher Stefan Schiller said in a specialized examination.

Checkmk’s open up resource edition of the checking resource is based on Nagios Main and offers integrations with NagVis for the visualization and generation of topological maps of infrastructures, servers, ports, and processes.

✔ Approved From Our Partners
AOMEI Backupper Lifetime

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code


According to its Munich-primarily based developer tribe29 GmbH, its Business and Uncooked editions are used by around 2,000 customers, together with Airbus, Adobe, NASA, Siemens, Vodafone, and many others.

Checkmk IT Infrastructure Monitoring Software

The four vulnerabilities, which consist of two Critical and two Medium severity bugs, are as follows –

  • A code injection flaw in watolib’s auth.php (CVSS rating: 9.1)
  • An arbitrary file browse flaw in NagVis (CVSS score: 9.1)
  • A command injection flaw Checkmk’s Livestatus wrapper and Python API (CVSS score: 6.8), and
  • A server-aspect ask for forgery (SSRF) flaw in the host registration API (CVSS score: 5.)

Though these shortcomings on their very own have a constrained effect, an adversary can chain the issues, commencing with the SSRF flaw to access an endpoint only reachable from localhost, using it to bypass authentication and read through a configuration file, ultimately gaining entry to the Checkmk GUI.

CyberSecurity

“This entry can even more be turned into remote code execution by exploiting a Code Injection vulnerability in a Checkmk GUI subcomponent identified as watolib, which generates a file named auth.php needed for the NagVis integration,” Schiller described.

Subsequent dependable disclosure on August 22, 2022, the 4 vulnerabilities have been patched in Checkmk version 2.1.0p12 introduced on September 15, 2022.

The findings stick to the discovery of many flaws in other checking methods like Zabbix and Icinga considering the fact that the begin of the year, which could have been exploited to compromise the servers by running arbitrary code.

Found this write-up appealing? Follow THN on Fb, Twitter  and LinkedIn to read a lot more distinctive material we put up.


Some components of this short article are sourced from:
thehackernews.com

Previous Post: «these android apps with a million play store installations redirect These Android Apps with a Million Play Store Installations Redirect Users to Malicious Sites
Next Post: Dropbox Suffers Breach, 130 GitHub Repositories Compromised Cyber Security News»

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Report This Article

Recent Posts

  • New 5G Modems Flaws Affect iOS Devices and Android Models from Major Brands
  • N. Korean Kimsuky Targeting South Korean Research Institutes with Backdoor Attacks
  • Ransomware-as-a-Service: The Growing Threat You Can’t Ignore
  • Mac Users Beware: New Trojan-Proxy Malware Spreading via Pirated Software
  • WordPress Releases Update 6.4.2 to Address Critical Remote Attack Vulnerability
  • Founder of Bitzlato Cryptocurrency Exchange Pleads Guilty in Money-Laundering Scheme
  • Microsoft Warns of COLDRIVER’s Evolving Evading and Credential-Stealing Tactics
  • New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS Devices
  • Hacking the Human Mind: Exploiting Vulnerabilities in the ‘First Line of Cyber Defense’
  • Building a Robust Threat Intelligence with Wazuh

Copyright © TheCyberSecurity.News, All Rights Reserved.